Problémy s grafikou, Control Panel a HD audio
Napsal: 26 dub 2015 11:08
Dobrý den, od 19. 4. 2015, kdy se problém vyskytl poprvé, došlo k nenačtení služby Control Panelu grafického ovladače Nvidia GeForce GTX 660 (aplikace nvcplui.exe). Od té doby se tento kontrolní panel nenačítá a současně s tím je nefunkční i služba HD audio. Nemám tak možnost nastavovat vlastnosti zobrazení. Zkusil jsem několikrát upgradeovat ovladač, včetně jeho odinstalace a opětovné instalace, leč výsledek žádný. Napadlo mne, zda se mi do PC nedostala nějaká neplecha, jež brání závěrečnému načtení služby. Tato služba se totiž načítá (alespoň u mne) až na konci bootování. Start probíhá korektně až do okamžiku hlášení "Počkejte, prosím", pak uplyne 55 s do změny na "Vítejte" a následně trvá dalších 20 s, než naběhne plocha. Současně systém vydá upozornění - soubor "Hlášení.jpg" v příloze. Dnes jsem stáhl RSIT a jeho log připojuji sem do textu. Současně mám k dispozici několik souborů, které dokumentují hlášení o upozorněních a chybách z prohlížeče událostí, jež v případě potřeby mám k dispozici. Zatím prosím o kontrolu logu a případné další rady, za něž předem děkuji.
log.txt:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Jaromír Pátra at 2015-04-26 09:51:35
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 111 GB (49%) free of 229 GB
Total RAM: 16361 MB (79% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:51:44, on 26.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
E:\Programy\Utility\WinSplit Revolution\WinSplit.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr32.exe
C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe
E:\Programy\Editory\Grafické\Zoner\Photo Studio 16\Program32\ZPSTray.exe
E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe
C:\TC\TOTALCMD.EXE
C:\Program Files\trend micro\Jaromír Pátra.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "E:\Programy\OCR\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Winsplit] E:\Programy\Utility\WinSplit Revolution\WinSplit.exe
O4 - HKCU\..\Run: [DesktopOK] "E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe" -bg -startup
O4 - HKCU\..\Run: [3E4E1B9EF85D8A8A5B653A5A2913A9F6682D71F1._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [CCleaner Monitoring] "E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "E:\PROGRAMY\EDITORY\GRAFICKÉ\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\Run: [NVIDIA Control Panel Application, 8.1.770.0] "C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: MEGAsync.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 11 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.11.0) - ABBYY - E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe
O23 - Service: DTSAudioService - DTS - C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\SysWOW64\drivers\pclepci.sys
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - E:\Programy\Systémové nástroje\Údržba\System Explorer\service\SystemExplorerService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 15452 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"taskhost.exe"
"E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe" -service
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORDTSUPTBT
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe" --type=host --daemon-pipe=384
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe"
"C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe"
"E:\Programy\Utility\WinSplit Revolution\WinSplit.exe"
"E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe" -bg -startup
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
szndesktop.exe default start
"C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "9620325701191503032-2047665844-1001211159-120412009019942802241602638791567894112
"E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr32.exe" 66190
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe"
"E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr64.exe" 66190
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"E:\Programy\Editory\Grafické\Zoner\Photo Studio 16\Program32\ZPSTray.exe"
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\SysWOW64\PSIService.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe"
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
"C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe"
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide
"C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\splwow64.exe 8192
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" ef9edf70-d755-4739-87e2-3f56fa05469d 1
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1963077689-1562537879-1864199266-1319523649414706573-1443198586-7005578602091540194
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
\??\C:\Windows\system32\conhost.exe "-460228237-115836074-1654125721149268388-1665004360-1966895226-267392219-1555359963
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\TC\TOTALCMD.EXE"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"G:\Stahy\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf8af65776f9e2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d04378ee675575.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf8af6578e79da.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d04378ee8739fc.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000Core.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000Core1d04160b893a637.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000UA.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000UA1d04160b8ae819b.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-25 551848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-25 212904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-06-24 7575768]
"RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-06-24 1387376]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-04-09 1570672]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5595336]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01 2417032]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-04-09 2673296]
"nvcplui.exe"=C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe [2015-04-08 12730184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Winsplit"=E:\Programy\Utility\WinSplit Revolution\WinSplit.exe [2011-04-12 3951616]
"DesktopOK"=E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe [2011-12-08 349184]
"3E4E1B9EF85D8A8A5B653A5A2913A9F6682D71F1._service_run"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-04-13 812872]
"Google Update"=C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe [2014-06-26 116648]
"CCleaner Monitoring"=E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner64.exe [2015-04-08 8202008]
"OneDrive"=C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-03-12 281248]
"Zoner Photo Studio Autoupdate"=E:\PROGRAMY\EDITORY\GRAFICKÉ\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2014-12-23 833240]
"NVIDIA Control Panel Application, 8.1.770.0"=C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe [2015-04-08 12730184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jaromír Pátra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2013-11-04 113288]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-04-30 284440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]
"Bonus.SSR.FR11"=E:\Programy\OCR\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-11-07 934152]
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2012-09-13 204136]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2015-02-12 5564784]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-04-09 2673296]
C:\Users\Jaromír Pátra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe
MEGAsync.lnk - C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\prwntdrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\prwntdrv]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-04-26 08:12:50 ----HD---- C:\OneDriveTemp
2015-04-25 21:39:33 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-04-25 21:29:41 ----A---- C:\Windows\SYSWOW64\RENB598.tmp
2015-04-25 20:49:07 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-04-22 19:29:56 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvopencl.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvoglv64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvinitx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvIFR64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvFBC64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcuvid.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcuda.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcompiler.dll
2015-04-21 14:08:43 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-04-21 14:02:23 ----D---- C:\ProgramData\CounterPath Corporation
2015-04-21 10:58:21 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-04-21 10:58:21 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-04-19 17:56:51 ----D---- C:\Program Files\Microsoft IntelliPoint
2015-04-19 17:52:13 ----A---- C:\Windows\system32\ipcoin82.dll
2015-04-19 17:52:04 ----A---- C:\Windows\system32\drivers\btfilter.sys
2015-04-19 17:52:04 ----A---- C:\Windows\system32\drivers\AthDfu.sys
2015-04-19 17:51:33 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2015-04-19 17:51:33 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2015-04-19 17:51:08 ----A---- C:\Windows\system32\drivers\e1c62x64.sys
2015-04-19 17:50:09 ----A---- C:\Windows\system32\YamahaAE2.dll
2015-04-19 17:50:09 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2015-04-19 17:50:08 ----A---- C:\Windows\SYSWOW64\SECOMN32.DLL
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRCOM64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRCOM.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRAPO64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SEHDRA64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SECOMN64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SEAPO64.dll
2015-04-19 17:50:07 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2015-04-19 17:50:06 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2015-04-19 17:50:06 ----A---- C:\Windows\system32\NahimicAPONSControl.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPP64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPO64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPD64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPA64F3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\CX64APO.dll
2015-04-19 17:44:02 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-04-18 10:50:21 ----N---- C:\bootsqm.dat
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuwebv.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wups2.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wups.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wudriver.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wucltux.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuaueng.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuauclt.exe
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuapp.exe
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuapi.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\invagent.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\generaltel.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\devinv.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\appraiser.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aepic.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aepdu.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aeinv.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\acmigration.dll
2015-04-15 07:34:05 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-04-15 07:34:05 ----A---- C:\Windows\system32\gdi32.dll
2015-04-15 07:34:04 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-04-15 07:34:04 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-04-15 07:34:04 ----A---- C:\Windows\system32\msxml3r.dll
2015-04-15 07:34:04 ----A---- C:\Windows\system32\msxml3.dll
2015-04-15 07:34:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-04-15 07:34:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-04-15 07:34:01 ----A---- C:\Windows\system32\ntdll.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\KernelBase.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\kernel32.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wow64win.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wow64.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\winsrv.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wdigest.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\srcore.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\schannel.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\rstrui.exe
2015-04-15 07:34:00 ----A---- C:\Windows\system32\ncrypt.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\msv1_0.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\lsasrv.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\kerberos.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-04-15 07:34:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-04-15 07:34:00 ----A---- C:\Windows\system32\conhost.exe
2015-04-15 07:33:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\wow64cpu.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\TSpkg.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\sspisrv.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\sspicli.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\srclient.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\smss.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\secur32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\ntvdm64.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\lsass.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\csrsrv.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\credssp.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\auditpol.exe
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\user.exe
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-04-15 07:33:57 ----A---- C:\Windows\system32\apisetschema.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\msobjs.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\msaudite.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\adtschema.dll
2015-04-15 07:33:35 ----A---- C:\Windows\system32\drivers\http.sys
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ie4uinit.exe
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-04-15 07:33:33 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 07:33:33 ----A---- C:\Windows\system32\iernonce.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\urlmon.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 07:33:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\iedkcs32.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\dxtrans.dll
2015-04-15 07:33:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\msfeeds.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\iesetup.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\iertutil.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\ieapfltr.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-04-15 07:33:30 ----A---- C:\Windows\system32\jsproxy.dll
2015-04-15 07:33:30 ----A---- C:\Windows\system32\ieUnatt.exe
2015-04-15 07:33:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\mshtmled.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\jscript9diag.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\jscript9.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\ieui.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\ieframe.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\dxtmsft.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\wininet.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\vbscript.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\msrating.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-04-15 07:33:27 ----A---- C:\Windows\system32\mshtml.dll
2015-04-15 07:32:42 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-04-15 07:32:42 ----A---- C:\Windows\system32\clfsw32.dll
2015-04-15 07:32:42 ----A---- C:\Windows\system32\clfs.sys
2015-04-13 17:08:59 ----A---- C:\Windows\system32\nvdispgenco6435012.dll
2015-04-13 17:08:59 ----A---- C:\Windows\system32\nvdispco6435012.dll
2015-04-07 10:41:28 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Oracle
2015-04-04 16:52:22 ----A---- C:\Windows\SYSWOW64\WDPABKP.dat
2015-04-04 08:27:50 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 08:27:50 ----SD---- C:\Windows\system32\GWX
2015-04-02 18:29:13 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\ChaosPro
======List of files/folders modified in the last 1 month======
2015-04-26 09:51:38 ----D---- C:\Program Files\trend micro
2015-04-26 09:51:35 ----D---- C:\rsit
2015-04-26 09:51:03 ----D---- C:\Windows\Temp
2015-04-26 08:23:41 ----D---- C:\Windows\system32\config
2015-04-26 08:18:23 ----D---- C:\Windows\System32
2015-04-26 08:18:23 ----D---- C:\Windows\inf
2015-04-26 08:18:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-26 08:17:23 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz
2015-04-26 08:12:43 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox
2015-04-26 08:12:30 ----D---- C:\Windows\SysWOW64
2015-04-26 08:10:53 ----D---- C:\ProgramData\NVIDIA
2015-04-25 22:04:11 ----SHD---- C:\Windows\Installer
2015-04-25 22:03:23 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-25 22:03:16 ----D---- C:\Program Files\Java
2015-04-25 22:02:38 ----RD---- C:\Program Files (x86)
2015-04-25 22:02:34 ----SHD---- C:\System Volume Information
2015-04-25 21:45:02 ----D---- C:\Windows
2015-04-25 21:41:52 ----D---- C:\Windows\system32\catroot
2015-04-25 21:27:50 ----D---- C:\Program Files (x86)\Common Files
2015-04-25 20:59:43 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-04-25 20:58:56 ----D---- C:\Windows\system32\drivers
2015-04-25 20:49:25 ----D---- C:\temp
2015-04-25 20:49:25 ----D---- C:\ProgramData\NVIDIA Corporation
2015-04-25 20:49:12 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-04-22 19:40:46 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Skype
2015-04-22 19:31:12 ----D---- C:\Windows\system32\DriverStore
2015-04-22 19:30:46 ----D---- C:\Program Files\NVIDIA Corporation
2015-04-22 19:30:44 ----D---- C:\Windows\system32\catroot2
2015-04-22 18:46:26 ----HD---- C:\ProgramData
2015-04-22 18:30:29 ----D---- C:\ProgramData\CanonIJPLM
2015-04-22 18:10:45 ----D---- C:\Windows\Microsoft.NET
2015-04-22 10:44:30 ----AD---- C:\ProgramData\TEMP
2015-04-22 09:34:07 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Mozilla
2015-04-21 19:34:14 ----D---- C:\Program Files (x86)\Google
2015-04-21 19:10:40 ----D---- C:\Windows\system32\Tasks
2015-04-21 18:45:59 ----D---- C:\Program Files (x86)\IObit
2015-04-21 18:29:27 ----D---- C:\Windows\registration
2015-04-21 14:08:44 ----RSD---- C:\Windows\assembly
2015-04-21 14:02:19 ----D---- C:\Users
2015-04-20 19:48:06 ----D---- C:\Windows\system32\wbem
2015-04-20 19:46:41 ----RD---- C:\Program Files (x86)\Skype
2015-04-20 19:46:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-20 19:46:40 ----D---- C:\ProgramData\IObit
2015-04-20 19:46:40 ----D---- C:\Program Files\Internet Explorer
2015-04-20 19:46:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-04-20 19:45:51 ----D---- C:\TC
2015-04-20 19:45:51 ----D---- C:\ProgramData\ProductData
2015-04-20 19:45:50 ----RSD---- C:\Windows\Fonts
2015-04-20 19:45:50 ----D---- C:\Windows\AppPatch
2015-04-20 19:45:50 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\PhotoFiltre Studio X
2015-04-20 19:45:49 ----SD---- C:\Windows\system32\CompatTel
2015-04-20 19:45:49 ----D---- C:\Windows\winsxs
2015-04-20 19:45:49 ----D---- C:\Windows\Tasks
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\wbem
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\en-US
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\drivers
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-04-20 19:45:49 ----D---- C:\Windows\system32\Msdtc
2015-04-20 19:45:49 ----D---- C:\Windows\system32\en-US
2015-04-20 19:45:49 ----D---- C:\Windows\system32\cs-CZ
2015-04-20 19:45:49 ----D---- C:\Windows\system32\CodeIntegrity
2015-04-20 19:45:49 ----D---- C:\Windows\system32\appraiser
2015-04-20 19:45:49 ----D---- C:\Windows\security
2015-04-20 19:45:49 ----D---- C:\Windows\PolicyDefinitions
2015-04-20 19:21:20 ----D---- C:\Windows\Prefetch
2015-04-19 18:26:32 ----D---- C:\Windows\Minidump
2015-04-19 18:22:59 ----D---- C:\Windows\debug
2015-04-19 17:57:06 ----SD---- C:\Users\Jaromír Pátra\AppData\Roaming\Microsoft
2015-04-19 17:56:51 ----RD---- C:\Program Files
2015-04-17 07:51:34 ----D---- C:\Windows\AppCompat
2015-04-15 11:09:26 ----D---- C:\ProgramData\Microsoft Help
2015-04-15 11:08:55 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-04-15 11:07:03 ----D---- C:\Windows\system32\MRT
2015-04-15 11:01:52 ----A---- C:\Windows\system32\MRT.exe
2015-04-10 18:17:38 ----D---- C:\ProgramData\Skype
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\OpenCL.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvspcap64.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvapi64.dll
2015-04-08 23:30:18 ----A---- C:\Windows\system32\nvsvc64.dll
2015-04-08 23:30:18 ----A---- C:\Windows\system32\nvcpl.dll
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvvsvc.exe
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvsvcr.dll
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvshext.dll
2015-04-08 23:30:13 ----A---- C:\Windows\system32\nvmctray.dll
2015-04-04 08:33:01 ----D---- C:\Windows\Logs
2015-03-28 12:12:45 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Winsplit Revolution
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2014-11-20 652784]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2014-11-20 28656]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2014-03-11 123704]
R0 mvs91xx;mvs91xx; C:\Windows\system32\DRIVERS\mvs91xx.sys [2014-03-11 321896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2013-11-20 276576]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-04-19 26528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2014-10-10 158968]
R2 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2014-11-21 93400]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-11-15 121832]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2010-11-15 364520]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2015-04-19 597192]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2015-04-19 495376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-24 3962840]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-09-21 351520]
R3 LVUVC64;Logitech Webcam C210(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-09-21 4763680]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-04-26 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-04-15 100312]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-11-06 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-04-09 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2011-08-01 45416]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2015-04-19 272600]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2014-11-20 34544]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 ATHDFU;Qualcomm Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2015-04-19 55448]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 cpuz134;cpuz134; \??\C:\Users\JAROMR~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 cpuz136;cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 fsbl;F-Secure BlackLight Engine Driver; C:\Windows\system32\drivers\fsbl.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
S3 MWAC;MWAC; \??\C:\Windows\system32\drivers\ []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service; E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 DTSAudioService;DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [2014-03-11 210024]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-10-01 1349576]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-04-09 1152144]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe [2015-03-08 56648]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
R2 MBAMService;MBAMService; E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
R2 MBAMScheduler;MBAMScheduler; E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-04-09 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-04-09 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2015-02-12 1042808]
R2 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2015-02-12 302968]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-04 116648]
S2 PCLEPCI;PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [2005-02-09 14165]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-04 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-12 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SystemExplorerHelpService;System Explorer Service; E:\Programy\Systémové nástroje\Údržba\System Explorer\service\SystemExplorerService64.exe [2014-12-02 820960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------
log.txt:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Jaromír Pátra at 2015-04-26 09:51:35
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 111 GB (49%) free of 229 GB
Total RAM: 16361 MB (79% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:51:44, on 26.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
E:\Programy\Utility\WinSplit Revolution\WinSplit.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr32.exe
C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe
E:\Programy\Editory\Grafické\Zoner\Photo Studio 16\Program32\ZPSTray.exe
E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe
C:\TC\TOTALCMD.EXE
C:\Program Files\trend micro\Jaromír Pátra.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "E:\Programy\OCR\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Winsplit] E:\Programy\Utility\WinSplit Revolution\WinSplit.exe
O4 - HKCU\..\Run: [DesktopOK] "E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe" -bg -startup
O4 - HKCU\..\Run: [3E4E1B9EF85D8A8A5B653A5A2913A9F6682D71F1._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [CCleaner Monitoring] "E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "E:\PROGRAMY\EDITORY\GRAFICKÉ\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\Run: [NVIDIA Control Panel Application, 8.1.770.0] "C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: MEGAsync.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 11 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.11.0) - ABBYY - E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe
O23 - Service: DTSAudioService - DTS - C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\SysWOW64\drivers\pclepci.sys
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - E:\Programy\Systémové nástroje\Údržba\System Explorer\service\SystemExplorerService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 15452 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"taskhost.exe"
"E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe" -service
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORDTSUPTBT
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe" --type=host --daemon-pipe=384
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe"
"C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe"
"E:\Programy\Utility\WinSplit Revolution\WinSplit.exe"
"E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe" -bg -startup
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
szndesktop.exe default start
"C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "9620325701191503032-2047665844-1001211159-120412009019942802241602638791567894112
"E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr32.exe" 66190
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe"
"E:\Programy\Utility\WinSplit Revolution\WinSplitDrvr64.exe" 66190
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"E:\Programy\Editory\Grafické\Zoner\Photo Studio 16\Program32\ZPSTray.exe"
"E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\SysWOW64\PSIService.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe"
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
"C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe"
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide
"C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\splwow64.exe 8192
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" ef9edf70-d755-4739-87e2-3f56fa05469d 1
"C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1963077689-1562537879-1864199266-1319523649414706573-1443198586-7005578602091540194
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
\??\C:\Windows\system32\conhost.exe "-460228237-115836074-1654125721149268388-1665004360-1966895226-267392219-1555359963
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\TC\TOTALCMD.EXE"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"G:\Stahy\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf8af65776f9e2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d04378ee675575.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf8af6578e79da.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d04378ee8739fc.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000Core.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000Core1d04160b893a637.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000UA.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2931098742-721466118-1452855030-1000UA1d04160b8ae819b.job - C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-25 551848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-25 212904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-06-24 7575768]
"RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-06-24 1387376]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-04-09 1570672]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5595336]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01 2417032]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-04-09 2673296]
"nvcplui.exe"=C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe [2015-04-08 12730184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Winsplit"=E:\Programy\Utility\WinSplit Revolution\WinSplit.exe [2011-04-12 3951616]
"DesktopOK"=E:\Programy\Zálohování\DesktopOK\DesktopOK_x64.exe [2011-12-08 349184]
"3E4E1B9EF85D8A8A5B653A5A2913A9F6682D71F1._service_run"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-04-13 812872]
"Google Update"=C:\Users\Jaromír Pátra\AppData\Local\Google\Update\GoogleUpdate.exe [2014-06-26 116648]
"CCleaner Monitoring"=E:\Programy\Systémové nástroje\Údržba\CCleaner\CCleaner64.exe [2015-04-08 8202008]
"OneDrive"=C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-03-12 281248]
"Zoner Photo Studio Autoupdate"=E:\PROGRAMY\EDITORY\GRAFICKÉ\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2014-12-23 833240]
"NVIDIA Control Panel Application, 8.1.770.0"=C:\Program Files (x86)\NVIDIA Corporation\Control Panel Client\nvcplui.exe [2015-04-08 12730184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Jaromír Pátra\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jaromír Pátra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2013-11-04 113288]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-04-30 284440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]
"Bonus.SSR.FR11"=E:\Programy\OCR\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-11-07 934152]
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2012-09-13 204136]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2015-02-12 5564784]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-04-09 2673296]
C:\Users\Jaromír Pátra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox\bin\Dropbox.exe
MEGAsync.lnk - C:\Users\Jaromír Pátra\AppData\Local\MEGAsync\MEGAsync.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\prwntdrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\prwntdrv]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-04-26 08:12:50 ----HD---- C:\OneDriveTemp
2015-04-25 21:39:33 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-04-25 21:29:41 ----A---- C:\Windows\SYSWOW64\RENB598.tmp
2015-04-25 20:49:07 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-04-22 19:29:56 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-04-22 19:29:55 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvopencl.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvoglv64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvinitx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvIFR64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\NvFBC64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcuvid.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcuda.dll
2015-04-22 19:29:55 ----A---- C:\Windows\system32\nvcompiler.dll
2015-04-21 14:08:43 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-04-21 14:02:23 ----D---- C:\ProgramData\CounterPath Corporation
2015-04-21 10:58:21 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-04-21 10:58:21 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-04-19 17:56:51 ----D---- C:\Program Files\Microsoft IntelliPoint
2015-04-19 17:52:13 ----A---- C:\Windows\system32\ipcoin82.dll
2015-04-19 17:52:04 ----A---- C:\Windows\system32\drivers\btfilter.sys
2015-04-19 17:52:04 ----A---- C:\Windows\system32\drivers\AthDfu.sys
2015-04-19 17:51:33 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2015-04-19 17:51:33 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2015-04-19 17:51:08 ----A---- C:\Windows\system32\drivers\e1c62x64.sys
2015-04-19 17:50:09 ----A---- C:\Windows\system32\YamahaAE2.dll
2015-04-19 17:50:09 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2015-04-19 17:50:08 ----A---- C:\Windows\SYSWOW64\SECOMN32.DLL
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRCOM64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRCOM.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SRAPO64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SEHDRA64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SECOMN64.dll
2015-04-19 17:50:08 ----A---- C:\Windows\system32\SEAPO64.dll
2015-04-19 17:50:07 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2015-04-19 17:50:06 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2015-04-19 17:50:06 ----A---- C:\Windows\system32\NahimicAPONSControl.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPP64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPO64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPD64AF3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\DDPA64F3.dll
2015-04-19 17:50:02 ----A---- C:\Windows\system32\CX64APO.dll
2015-04-19 17:44:02 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-04-18 10:50:21 ----N---- C:\bootsqm.dat
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-04-15 07:34:15 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuwebv.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wups2.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wups.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wudriver.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wucltux.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuaueng.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuauclt.exe
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuapp.exe
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wuapi.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 07:34:15 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\invagent.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\generaltel.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\devinv.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\appraiser.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aepic.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aepdu.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\aeinv.dll
2015-04-15 07:34:06 ----A---- C:\Windows\system32\acmigration.dll
2015-04-15 07:34:05 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-04-15 07:34:05 ----A---- C:\Windows\system32\gdi32.dll
2015-04-15 07:34:04 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-04-15 07:34:04 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-04-15 07:34:04 ----A---- C:\Windows\system32\msxml3r.dll
2015-04-15 07:34:04 ----A---- C:\Windows\system32\msxml3.dll
2015-04-15 07:34:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-04-15 07:34:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-04-15 07:34:01 ----A---- C:\Windows\system32\ntdll.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\KernelBase.dll
2015-04-15 07:34:01 ----A---- C:\Windows\system32\kernel32.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-04-15 07:34:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wow64win.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wow64.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\winsrv.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\wdigest.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\srcore.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\schannel.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\rstrui.exe
2015-04-15 07:34:00 ----A---- C:\Windows\system32\ncrypt.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\msv1_0.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\lsasrv.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\kerberos.dll
2015-04-15 07:34:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-04-15 07:34:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-04-15 07:34:00 ----A---- C:\Windows\system32\conhost.exe
2015-04-15 07:33:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 07:33:59 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-04-15 07:33:59 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\wow64cpu.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\TSpkg.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\sspisrv.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\sspicli.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\srclient.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\smss.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\secur32.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\ntvdm64.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\lsass.exe
2015-04-15 07:33:59 ----A---- C:\Windows\system32\csrsrv.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\credssp.dll
2015-04-15 07:33:59 ----A---- C:\Windows\system32\auditpol.exe
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 07:33:58 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 07:33:57 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\user.exe
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-04-15 07:33:57 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-04-15 07:33:57 ----A---- C:\Windows\system32\apisetschema.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-04-15 07:33:56 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\msobjs.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\msaudite.dll
2015-04-15 07:33:56 ----A---- C:\Windows\system32\adtschema.dll
2015-04-15 07:33:35 ----A---- C:\Windows\system32\drivers\http.sys
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-04-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-04-15 07:33:34 ----A---- C:\Windows\system32\ie4uinit.exe
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-04-15 07:33:33 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-04-15 07:33:33 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 07:33:33 ----A---- C:\Windows\system32\iernonce.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-04-15 07:33:32 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\urlmon.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 07:33:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\iedkcs32.dll
2015-04-15 07:33:32 ----A---- C:\Windows\system32\dxtrans.dll
2015-04-15 07:33:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\msfeeds.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\iesetup.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\iertutil.dll
2015-04-15 07:33:31 ----A---- C:\Windows\system32\ieapfltr.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 07:33:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-04-15 07:33:30 ----A---- C:\Windows\system32\jsproxy.dll
2015-04-15 07:33:30 ----A---- C:\Windows\system32\ieUnatt.exe
2015-04-15 07:33:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\mshtmled.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\jscript9diag.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\jscript9.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\ieui.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\ieframe.dll
2015-04-15 07:33:29 ----A---- C:\Windows\system32\dxtmsft.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\wininet.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\vbscript.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\msrating.dll
2015-04-15 07:33:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-04-15 07:33:27 ----A---- C:\Windows\system32\mshtml.dll
2015-04-15 07:32:42 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-04-15 07:32:42 ----A---- C:\Windows\system32\clfsw32.dll
2015-04-15 07:32:42 ----A---- C:\Windows\system32\clfs.sys
2015-04-13 17:08:59 ----A---- C:\Windows\system32\nvdispgenco6435012.dll
2015-04-13 17:08:59 ----A---- C:\Windows\system32\nvdispco6435012.dll
2015-04-07 10:41:28 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Oracle
2015-04-04 16:52:22 ----A---- C:\Windows\SYSWOW64\WDPABKP.dat
2015-04-04 08:27:50 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 08:27:50 ----SD---- C:\Windows\system32\GWX
2015-04-02 18:29:13 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\ChaosPro
======List of files/folders modified in the last 1 month======
2015-04-26 09:51:38 ----D---- C:\Program Files\trend micro
2015-04-26 09:51:35 ----D---- C:\rsit
2015-04-26 09:51:03 ----D---- C:\Windows\Temp
2015-04-26 08:23:41 ----D---- C:\Windows\system32\config
2015-04-26 08:18:23 ----D---- C:\Windows\System32
2015-04-26 08:18:23 ----D---- C:\Windows\inf
2015-04-26 08:18:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-26 08:17:23 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Seznam.cz
2015-04-26 08:12:43 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Dropbox
2015-04-26 08:12:30 ----D---- C:\Windows\SysWOW64
2015-04-26 08:10:53 ----D---- C:\ProgramData\NVIDIA
2015-04-25 22:04:11 ----SHD---- C:\Windows\Installer
2015-04-25 22:03:23 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-25 22:03:16 ----D---- C:\Program Files\Java
2015-04-25 22:02:38 ----RD---- C:\Program Files (x86)
2015-04-25 22:02:34 ----SHD---- C:\System Volume Information
2015-04-25 21:45:02 ----D---- C:\Windows
2015-04-25 21:41:52 ----D---- C:\Windows\system32\catroot
2015-04-25 21:27:50 ----D---- C:\Program Files (x86)\Common Files
2015-04-25 20:59:43 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-04-25 20:58:56 ----D---- C:\Windows\system32\drivers
2015-04-25 20:49:25 ----D---- C:\temp
2015-04-25 20:49:25 ----D---- C:\ProgramData\NVIDIA Corporation
2015-04-25 20:49:12 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-04-22 19:40:46 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Skype
2015-04-22 19:31:12 ----D---- C:\Windows\system32\DriverStore
2015-04-22 19:30:46 ----D---- C:\Program Files\NVIDIA Corporation
2015-04-22 19:30:44 ----D---- C:\Windows\system32\catroot2
2015-04-22 18:46:26 ----HD---- C:\ProgramData
2015-04-22 18:30:29 ----D---- C:\ProgramData\CanonIJPLM
2015-04-22 18:10:45 ----D---- C:\Windows\Microsoft.NET
2015-04-22 10:44:30 ----AD---- C:\ProgramData\TEMP
2015-04-22 09:34:07 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Mozilla
2015-04-21 19:34:14 ----D---- C:\Program Files (x86)\Google
2015-04-21 19:10:40 ----D---- C:\Windows\system32\Tasks
2015-04-21 18:45:59 ----D---- C:\Program Files (x86)\IObit
2015-04-21 18:29:27 ----D---- C:\Windows\registration
2015-04-21 14:08:44 ----RSD---- C:\Windows\assembly
2015-04-21 14:02:19 ----D---- C:\Users
2015-04-20 19:48:06 ----D---- C:\Windows\system32\wbem
2015-04-20 19:46:41 ----RD---- C:\Program Files (x86)\Skype
2015-04-20 19:46:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-20 19:46:40 ----D---- C:\ProgramData\IObit
2015-04-20 19:46:40 ----D---- C:\Program Files\Internet Explorer
2015-04-20 19:46:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-04-20 19:45:51 ----D---- C:\TC
2015-04-20 19:45:51 ----D---- C:\ProgramData\ProductData
2015-04-20 19:45:50 ----RSD---- C:\Windows\Fonts
2015-04-20 19:45:50 ----D---- C:\Windows\AppPatch
2015-04-20 19:45:50 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\PhotoFiltre Studio X
2015-04-20 19:45:49 ----SD---- C:\Windows\system32\CompatTel
2015-04-20 19:45:49 ----D---- C:\Windows\winsxs
2015-04-20 19:45:49 ----D---- C:\Windows\Tasks
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\wbem
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\en-US
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\drivers
2015-04-20 19:45:49 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-04-20 19:45:49 ----D---- C:\Windows\system32\Msdtc
2015-04-20 19:45:49 ----D---- C:\Windows\system32\en-US
2015-04-20 19:45:49 ----D---- C:\Windows\system32\cs-CZ
2015-04-20 19:45:49 ----D---- C:\Windows\system32\CodeIntegrity
2015-04-20 19:45:49 ----D---- C:\Windows\system32\appraiser
2015-04-20 19:45:49 ----D---- C:\Windows\security
2015-04-20 19:45:49 ----D---- C:\Windows\PolicyDefinitions
2015-04-20 19:21:20 ----D---- C:\Windows\Prefetch
2015-04-19 18:26:32 ----D---- C:\Windows\Minidump
2015-04-19 18:22:59 ----D---- C:\Windows\debug
2015-04-19 17:57:06 ----SD---- C:\Users\Jaromír Pátra\AppData\Roaming\Microsoft
2015-04-19 17:56:51 ----RD---- C:\Program Files
2015-04-17 07:51:34 ----D---- C:\Windows\AppCompat
2015-04-15 11:09:26 ----D---- C:\ProgramData\Microsoft Help
2015-04-15 11:08:55 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-04-15 11:07:03 ----D---- C:\Windows\system32\MRT
2015-04-15 11:01:52 ----A---- C:\Windows\system32\MRT.exe
2015-04-10 18:17:38 ----D---- C:\ProgramData\Skype
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\OpenCL.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvspcap64.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvapi64.dll
2015-04-08 23:30:18 ----A---- C:\Windows\system32\nvsvc64.dll
2015-04-08 23:30:18 ----A---- C:\Windows\system32\nvcpl.dll
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvvsvc.exe
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvsvcr.dll
2015-04-08 23:30:14 ----A---- C:\Windows\system32\nvshext.dll
2015-04-08 23:30:13 ----A---- C:\Windows\system32\nvmctray.dll
2015-04-04 08:33:01 ----D---- C:\Windows\Logs
2015-03-28 12:12:45 ----D---- C:\Users\Jaromír Pátra\AppData\Roaming\Winsplit Revolution
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2014-11-20 652784]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2014-11-20 28656]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2014-03-11 123704]
R0 mvs91xx;mvs91xx; C:\Windows\system32\DRIVERS\mvs91xx.sys [2014-03-11 321896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2013-11-20 276576]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-04-19 26528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2014-10-10 158968]
R2 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2014-11-21 93400]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-11-15 121832]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2010-11-15 364520]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2015-04-19 597192]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2015-04-19 495376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-24 3962840]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-09-21 351520]
R3 LVUVC64;Logitech Webcam C210(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-09-21 4763680]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-04-26 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-04-15 100312]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-11-06 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-04-09 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2011-08-01 45416]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2015-04-19 272600]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2014-11-20 34544]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 ATHDFU;Qualcomm Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2015-04-19 55448]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 cpuz134;cpuz134; \??\C:\Users\JAROMR~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 cpuz136;cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 fsbl;F-Secure BlackLight Engine Driver; C:\Windows\system32\drivers\fsbl.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
S3 MWAC;MWAC; \??\C:\Windows\system32\drivers\ []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service; E:\Programy\OCR\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 DTSAudioService;DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [2014-03-11 210024]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-10-01 1349576]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files (x86)\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-04-09 1152144]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe [2015-03-08 56648]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
R2 MBAMService;MBAMService; E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
R2 MBAMScheduler;MBAMScheduler; E:\Programy\Antispyware\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-04-09 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-04-09 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2015-02-12 1042808]
R2 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2015-02-12 302968]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-04 116648]
S2 PCLEPCI;PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [2005-02-09 14165]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-04 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-12 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SystemExplorerHelpService;System Explorer Service; E:\Programy\Systémové nástroje\Údržba\System Explorer\service\SystemExplorerService64.exe [2014-12-02 820960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------