VIRY.CZ

Zdravím, dnes po zapnutí notebooku sem mi ukázala modrá obrazovka se zamračeným smajlíkem (Mám windows 8.1) s chybou BAD_POOL_HEADER. Poté co se restartoval se mi na ploše ukázalo hlášení - viz screen. Přikládám log z RSIT.




Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomas at 2015-07-11 20:33:06
Microsoft Windows 8.1
System drive C: has 237 GB (26%) free of 905 GB
Total RAM: 3962 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:33:08, on 11. 7. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\AVAST Software\Avast\avBugReport.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe
c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe
C:\Program Files\trend micro\Tomas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O2 - BHO: Kwyshell MidpX BHO - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files (x86)\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll
O3 - Toolbar: Kwyshell MidpX - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files (x86)\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O8 - Extra context menu item: Customize Menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Link to &MidpX - C:\Program Files (x86)\Kwyshell\MidpX\JadInvoker\Extent\jad_wrap.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Save Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Show avast! EasyPass Toolbar - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - (no file)
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - (no file)
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - (no file)
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - (no file)
O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - (no file)
O9 - Extra 'Tools' menuitem: Show avast! EasyPass Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - (no file)
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{5667B02C-3890-45A6-9A63-6F036B8BA497}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FE84DB5B-1860-4CAD-8ACB-28D004D33A18}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - Unknown owner - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - Unknown owner - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15284 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe"
taskeng.exe {61050464-CBC2-4B49-BFC4-7D5AED34565E}
"C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe"
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\WINDOWS\system32\CxAudMsg64.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\SysWOW64\SAsrv.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 693f76fd-3b32-4e77-9e8b-2c307f28d914 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Windows\System32\rundll32.exe" C:\WINDOWS\system32\THXCfg64.dll,RunDLLEntry THXCfg64
"C:\Windows\System32\rundll32.exe" C:\WINDOWS\system32\AmbRunE.dll,RunDLLEntry
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" /r
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\BlueStacks\HD-Network.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\avBugReport.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4


"C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe"
"C:\WINDOWS\system32\RunDll32.exe" "C:\WINDOWS\system32\WerConCpl.dll", LaunchErcApp -queuereporting
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe -Embedding
"c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe" -updatecheck
"C:\Users\Tomas\Downloads\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
werfault.exe /h /shared Global\c2c083d470f44825af0f3e44ec3852bc /t 2548 /p 3892
"C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService"
"C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe" SystemController GetUserSettingsInfo
"C:\Users\Tomas\Downloads\RSITx64.exe"
taskhost.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\k1dcz7ya.default-1431965186467

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.191 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.191 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_191.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-30 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-30 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-30 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-30 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EBE9E2B5-B526-48BC-AD46-687263EDCB0E}]
Kwyshell MidpX - C:\Program Files (x86)\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll [2004-12-03 100864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - avast! EasyPass Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-02-25 26343936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - Kwyshell MidpX - C:\Program Files (x86)\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll [2004-12-03 100864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2014-01-25 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2014-01-25 771544]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2014-01-25 770520]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-20 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-20 191568]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-11-17 2800296]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-09-30 825184]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-07-24 903384]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"THXCfg64"=C:\WINDOWS\system32\THXCfg64.dll [2010-07-26 18432]
"RunDLLEntry"=C:\WINDOWS\system32\AmbRunE.dll [2009-02-26 17920]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]
"RoboForm"=C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-02-25 100200]
"uTorrent"=C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe [2015-05-06 1694560]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-04-17 31280256]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2012-05-02 548864]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-13 5515496]
"BlueStacks Agent"=C:\Program Files (x86)\BlueStacks\HD-Agent.exe [2015-03-24 863960]
"VolPanel"=C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe [2010-02-18 241789]
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" d3dgearload64.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-25 624640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.WVC1"=d3dgeardecoder64.dll
"VIDC.WMV3"=d3dgeardecoder64.dll
"VIDC.MJPG"=bdmjpeg64.dll
"VIDC.M4S2"=d3dgeardecoder64.dll
"VIDC.FVFW"=d3dgeardecoder64.dll
"VIDC.FFVH"=d3dgeardecoder64.dll
"vidc.tscc"=C:\WINDOWS\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\WINDOWS\SysWOW64\tsc2_codec64.dll
"VIDC.FPS1"=frapsv64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-07-11 20:30:09 ----D---- C:\rsit
2015-06-28 17:09:59 ----D---- C:\Program Files\Common Files\DESIGNER
2015-06-25 18:11:37 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-06-24 18:28:51 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-06-20 13:50:37 ----D---- C:\Program Files (x86)\Sigma Team
2015-06-19 08:16:38 ----D---- C:\Users\Tomas\AppData\Roaming\InstallShield
2015-06-13 16:25:39 ----D---- C:\Program Files (x86)\GSAutoClicker3
2015-06-12 08:29:23 ----A---- C:\WINDOWS\system32\puiobj.dll
2015-06-12 08:29:23 ----A---- C:\WINDOWS\system32\localspl.dll
2015-06-12 08:29:22 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2015-06-12 08:29:22 ----A---- C:\WINDOWS\system32\compstui.dll
2015-06-12 08:29:19 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-06-12 08:29:19 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-06-12 08:29:17 ----A---- C:\WINDOWS\SYSWOW64\rastapi.dll
2015-06-12 08:29:17 ----A---- C:\WINDOWS\system32\rastapi.dll
2015-06-12 08:29:16 ----A---- C:\WINDOWS\system32\UtcResources.dll
2015-06-12 08:29:16 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-06-12 08:29:14 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-06-12 08:29:14 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-12 08:29:12 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-06-12 08:29:11 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2015-06-12 08:29:11 ----A---- C:\WINDOWS\system32\authz.dll
2015-06-12 08:28:58 ----A---- C:\WINDOWS\SYSWOW64\rgb9rast.dll
2015-06-12 08:28:54 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-06-12 08:28:54 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-06-12 08:28:52 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-06-12 08:28:52 ----A---- C:\WINDOWS\system32\tquery.dll
2015-06-12 08:28:52 ----A---- C:\WINDOWS\system32\mssph.dll
2015-06-12 08:28:51 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-06-12 08:28:51 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-06-12 08:28:50 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-06-12 08:28:50 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2015-06-12 08:28:50 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-12 08:28:50 ----A---- C:\WINDOWS\system32\mssvp.dll
2015-06-12 08:28:50 ----A---- C:\WINDOWS\system32\mssphtb.dll
2015-06-12 08:28:49 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2015-06-10 12:59:23 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2015-06-10 12:59:23 ----A---- C:\WINDOWS\system32\comctl32.dll
2015-06-10 12:59:11 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-06-10 12:59:07 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-06-10 12:59:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-06-10 12:59:02 ----A---- C:\WINDOWS\system32\wininet.dll
2015-06-10 12:59:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-06-10 12:59:00 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-06-10 12:58:57 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-06-10 12:58:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-06-10 12:58:55 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-06-10 12:58:54 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-06-10 12:58:54 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-06-10 12:58:54 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-06-10 12:58:53 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2015-06-10 12:58:53 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-06-10 12:58:51 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-06-10 12:58:51 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-06-10 12:58:49 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-06-10 12:58:49 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-06-10 12:58:49 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-06-10 12:58:49 ----A---- C:\WINDOWS\system32\jscript.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-06-10 12:58:48 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\system32\ieui.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-06-10 12:58:46 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-06-10 12:58:45 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-06-10 12:58:26 ----A---- C:\WINDOWS\system32\win32k.sys
2015-06-05 22:46:23 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-06-05 22:46:23 ----D---- C:\WINDOWS\system32\NV
2015-06-05 10:42:09 ----A---- C:\WINDOWS\system32\invagent.dll
2015-06-05 10:42:09 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-06-05 10:42:09 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-06-05 10:42:09 ----A---- C:\WINDOWS\system32\aepic.dll
2015-06-05 10:42:09 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-06-05 10:42:08 ----A---- C:\WINDOWS\system32\devinv.dll
2015-06-05 10:42:08 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-06-05 10:42:07 ----A---- C:\WINDOWS\system32\aepdu.dll
2015-06-04 18:30:53 ----D---- C:\Program Files (x86)\SjBoy Special Edition - ChingLish
2015-06-04 17:29:17 ----D---- C:\ProgramData\boost_interprocess
2015-06-04 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-06-04 17:28:05 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-06-04 17:28:04 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-06-04 17:28:03 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-06-04 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-06-04 17:28:02 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-06-04 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-06-04 17:27:59 ----A---- C:\WINDOWS\system32\nvdispgenco6435306.dll
2015-06-04 17:27:55 ----A---- C:\WINDOWS\system32\nvdispco6435306.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-06-04 17:27:53 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-06-04 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-06-04 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-06-04 09:57:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-05-20 09:45:48 ----D---- C:\WINDOWS\Migration
2015-05-14 17:07:25 ----D---- C:\Users\Tomas\AppData\Roaming\Milestone
2015-05-13 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 16:58:29 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:58:36 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-05-13 13:58:35 ----AC---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-05-13 13:57:39 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-05-13 13:57:36 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-05-13 13:56:09 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-05-13 13:56:09 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2015-05-13 13:56:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2015-05-13 13:56:08 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-13 13:56:08 ----A---- C:\WINDOWS\system32\SRH.dll
2015-05-13 13:56:08 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2015-05-13 13:56:07 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-05-13 13:56:07 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2015-05-13 13:56:07 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2015-05-13 13:56:07 ----A---- C:\WINDOWS\system32\dbghelp.dll
2015-05-13 13:56:07 ----A---- C:\WINDOWS\system32\dbgeng.dll
2015-05-13 13:56:05 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2015-05-13 13:56:05 ----A---- C:\WINDOWS\system32\schannel.dll
2015-05-13 13:56:02 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2015-05-13 13:56:02 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-05-13 13:56:02 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-05-13 13:56:02 ----A---- C:\WINDOWS\system32\certcli.dll
2015-05-13 13:55:56 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2015-05-13 13:55:56 ----A---- C:\WINDOWS\system32\sdbinst.exe
2015-05-13 13:55:55 ----AC---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-05-13 13:55:55 ----AC---- C:\WINDOWS\system32\drivers\dumpsd.sys
2015-05-13 13:55:55 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2015-05-13 13:55:54 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2015-05-13 13:55:54 ----A---- C:\WINDOWS\system32\wpdshext.dll
2015-05-13 13:55:54 ----A---- C:\WINDOWS\system32\services.exe
2015-05-13 13:55:51 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2015-05-13 13:55:27 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2015-05-13 13:55:20 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-13 13:55:19 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2015-05-13 13:55:19 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-05-13 13:55:18 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-05-13 13:55:17 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-05-13 13:54:45 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-05-13 13:54:43 ----A---- C:\WINDOWS\system32\inseng.dll
2015-05-13 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-05-05 20:20:38 ----A---- C:\WINDOWS\AutoKMS.ini
2015-05-05 20:20:37 ----N---- C:\WINDOWS\KMSEmulator.exe
2015-05-05 20:15:59 ----A---- C:\Office 2010 Toolkit.exe
2015-05-05 20:15:57 ----A---- C:\Torrant.exe
2015-05-05 20:15:57 ----A---- C:\cryptedcybertoirrent.exe
2015-05-05 19:46:30 ----D---- C:\Program Files\Microsoft Synchronization Services
2015-05-05 19:45:08 ----D---- C:\WINDOWS\PCHEALTH
2015-05-05 19:45:08 ----D---- C:\Program Files\Microsoft Sync Framework
2015-05-05 19:45:08 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2015-05-05 19:38:24 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-05-05 19:35:32 ----D---- C:\Program Files\Microsoft Analysis Services
2015-05-05 19:35:31 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-05-05 19:34:58 ----D---- C:\Program Files (x86)\Microsoft Office
2015-05-05 19:34:45 ----D---- C:\Program Files\Microsoft Office
2015-05-04 22:12:51 ----D---- C:\Program Files (x86)\LibreOffice 4
2015-05-02 15:26:20 ----D---- C:\Users\Tomas\AppData\Roaming\Dropbox
2015-04-30 22:29:44 ----A---- C:\WINDOWS\avastSS.scr
2015-04-30 09:22:50 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2015-04-30 09:22:33 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2015-04-30 09:22:32 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2015-04-17 20:02:05 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-04-17 20:02:05 ----SD---- C:\WINDOWS\system32\GWX
2015-04-17 20:01:50 ----D---- C:\WINDOWS\system32\appraiser
2015-04-15 17:58:53 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-04-15 17:58:53 ----A---- C:\WINDOWS\system32\msctf.dll
2015-04-15 17:58:47 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 17:58:46 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2015-04-15 17:58:46 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2015-04-15 17:58:46 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-04-15 17:58:46 ----A---- C:\WINDOWS\system32\tdh.dll
2015-04-15 17:58:46 ----A---- C:\WINDOWS\system32\sechost.dll
2015-04-15 17:58:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-04-15 17:58:45 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2015-04-15 17:58:45 ----A---- C:\WINDOWS\system32\wow64.dll
2015-04-15 17:58:45 ----A---- C:\WINDOWS\system32\tracerpt.exe
2015-04-15 17:58:45 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 17:58:44 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 17:58:34 ----A---- C:\WINDOWS\system32\lsm.dll
2015-04-15 17:56:25 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2015-04-15 17:56:25 ----A---- C:\WINDOWS\system32\pku2u.dll
2015-04-15 17:56:14 ----A---- C:\WINDOWS\system32\drivers\http.sys
2015-04-15 17:56:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-04-15 17:56:05 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-04-15 17:56:04 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-04-15 17:56:04 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wups2.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wups.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 17:56:04 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-04-15 17:56:02 ----A---- C:\WINDOWS\system32\wuaext.dll
2015-04-15 17:56:00 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2015-04-15 17:56:00 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2015-04-15 17:56:00 ----A---- C:\WINDOWS\system32\clfsw32.dll
2015-04-15 16:41:10 ----D---- C:\WINDOWS\1C4551A64743409391E41477CD655043.TMP
2015-04-15 16:20:50 ----D---- C:\Program Files (x86)\Airport Simulator 2014
2015-04-15 11:26:00 ----D---- C:\Program Files (x86)\Coupons
2015-04-14 03:33:36 ----A---- C:\WINDOWS\system32\FM20.DLL
2015-04-13 20:37:19 ----D---- C:\FRST
2015-04-13 15:18:29 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-04-13 15:10:14 ----D---- C:\ProgramData\Malwarebytes
2015-04-13 15:10:14 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-13 15:10:14 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-04-13 15:10:14 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-04-13 15:10:14 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-04-12 15:10:38 ----D---- C:\Program Files (x86)\Zards software
2015-04-12 14:47:53 ----D---- C:\ProgramData\EPS

======List of files/folders modified in the last 3 months======

2015-07-11 20:33:06 ----D---- C:\Program Files\trend micro
2015-07-11 20:32:48 ----D---- C:\WINDOWS\Temp
2015-07-11 20:32:04 ----D---- C:\WINDOWS\Prefetch
2015-07-11 20:24:24 ----D---- C:\WINDOWS\system32\sru
2015-07-11 20:22:24 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-07-11 19:54:57 ----SHD---- C:\System Volume Information
2015-07-11 19:40:29 ----D---- C:\Windows
2015-07-11 11:11:42 ----D---- C:\WINDOWS\System32
2015-07-11 11:11:42 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-10 17:58:46 ----D---- C:\WINDOWS\SysWOW64
2015-07-10 16:17:40 ----D---- C:\WINDOWS\Microsoft.NET
2015-07-10 14:40:02 ----D---- C:\WINDOWS\system32\config
2015-07-10 14:32:00 ----D---- C:\WINDOWS\CbsTemp
2015-07-10 14:31:56 ----D---- C:\WINDOWS\WinSxS
2015-07-08 11:55:40 ----D---- C:\WINDOWS\system32\NDF
2015-07-05 22:18:27 ----RD---- C:\Program Files (x86)
2015-07-05 15:10:30 ----HD---- C:\Program Files\WindowsApps
2015-07-05 13:21:31 ----D---- C:\Program Files (x86)\Ubisoft
2015-07-04 17:27:54 ----SHD---- C:\WINDOWS\Installer
2015-07-04 17:19:23 ----D---- C:\WINDOWS\system32\drivers
2015-07-04 17:18:55 ----D---- C:\WINDOWS\system32\catroot2
2015-07-04 10:37:21 ----D---- C:\WINDOWS\Inf
2015-06-29 20:02:43 ----RSD---- C:\WINDOWS\assembly
2015-06-29 19:52:46 ----D---- C:\ProgramData\Microsoft Help
2015-06-29 19:49:16 ----A---- C:\WINDOWS\win.ini
2015-06-28 17:09:59 ----D---- C:\Program Files\Common Files
2015-06-27 15:28:15 ----D---- C:\Program Files\Common Files\System
2015-06-25 14:03:53 ----D---- C:\Users\Tomas\AppData\Roaming\uTorrent
2015-06-24 18:31:28 ----D---- C:\WINDOWS\system32\DriverStore
2015-06-24 18:29:17 ----D---- C:\WINDOWS\system32\Tasks
2015-06-23 18:33:55 ----D---- C:\Games
2015-06-23 10:42:54 ----D---- C:\ProgramData\Ubisoft
2015-06-23 09:12:02 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-06-22 12:25:02 ----D---- C:\ProgramData\Origin
2015-06-22 08:39:06 ----D---- C:\ProgramData\Adobe
2015-06-21 17:33:18 ----HD---- C:\WINDOWS\msdownld.tmp
2015-06-21 17:32:59 ----D---- C:\WINDOWS\SYSWOW64\directx
2015-06-20 13:35:08 ----D---- C:\Users\Tomas\AppData\Roaming\Adobe
2015-06-20 13:32:21 ----D---- C:\Program Files (x86)\Common Files
2015-06-20 13:32:21 ----D---- C:\Program Files (x86)\Adobe
2015-06-15 18:39:54 ----SD---- C:\Users\Tomas\AppData\Roaming\Microsoft
2015-06-13 20:12:15 ----RD---- C:\WINDOWS\ToastData
2015-06-12 13:59:24 ----D---- C:\WINDOWS\system32\MRT
2015-06-12 13:49:13 ----A---- C:\WINDOWS\system32\MRT.exe
2015-06-11 15:13:55 ----D---- C:\WINDOWS\rescache
2015-06-10 14:00:12 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-06-10 14:00:12 ----D---- C:\Program Files\Internet Explorer
2015-06-10 14:00:12 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-10 14:00:11 ----D---- C:\WINDOWS\system32\cs-CZ
2015-06-10 14:00:11 ----D---- C:\WINDOWS\PolicyDefinitions
2015-06-09 15:33:10 ----D---- C:\Program Files (x86)\Origin Games
2015-06-09 15:29:33 ----D---- C:\Users\Tomas\AppData\Roaming\Origin
2015-06-09 15:22:55 ----D---- C:\Program Files (x86)\Origin
2015-06-05 23:38:56 ----D---- C:\Program Files
2015-06-05 23:36:12 ----D---- C:\Users\Tomas\AppData\Roaming\ClassicShell
2015-06-05 22:45:53 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-05 22:44:36 ----SD---- C:\WINDOWS\system32\CompatTel
2015-06-05 22:44:36 ----D---- C:\WINDOWS\apppatch
2015-06-04 18:31:54 ----D---- C:\rms
2015-06-04 17:58:46 ----D---- C:\Users\Tomas\AppData\Roaming\TS3Client
2015-06-04 17:46:47 ----D---- C:\ProgramData\NVIDIA Corporation
2015-06-04 17:37:46 ----D---- C:\ProgramData\NVIDIA
2015-06-04 17:34:48 ----D---- C:\TEMP
2015-06-04 17:33:28 ----D---- C:\Program Files\NVIDIA Corporation
2015-06-04 17:29:17 ----HD---- C:\ProgramData
2015-06-04 16:15:21 ----D---- C:\WINDOWS\AppReadiness
2015-06-01 17:01:10 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2015-06-01 14:49:14 ----D---- C:\Program Files (x86)\opera
2015-05-31 11:48:11 ----D---- C:\Program Files (x86)\Thread Manager
2015-05-28 09:04:11 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-05-28 09:04:11 ----A---- C:\WINDOWS\system32\nvapi64.dll
2015-05-28 06:15:30 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-05-28 06:15:29 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-05-28 06:15:29 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-05-28 06:15:28 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-05-22 14:35:38 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2015-05-18 19:59:45 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2015-05-18 19:59:26 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2015-05-18 19:12:07 ----D---- C:\WINDOWS\system32\LogFiles
2015-05-17 17:49:03 ----D---- C:\ProgramData\Skype
2015-05-17 17:23:48 ----D---- C:\Users\Tomas\AppData\Roaming\.minecraft
2015-05-17 12:17:04 ----D---- C:\Users\Tomas\AppData\Roaming\Riot Games
2015-05-17 12:16:25 ----D---- C:\WINDOWS\Tasks
2015-05-14 10:49:51 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-05-14 10:49:50 ----RSD---- C:\WINDOWS\Fonts
2015-05-14 10:49:50 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2015-05-13 16:35:14 ----D---- C:\Program Files\Microsoft Silverlight
2015-05-13 16:35:14 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-05-13 16:26:12 ----D---- C:\Program Files\Windows Journal
2015-05-12 20:27:46 ----D---- C:\Program Files (x86)\WarThunder
2015-05-10 21:14:11 ----D---- C:\Drivers
2015-05-05 19:48:22 ----D---- C:\WINDOWS\ShellNew
2015-05-05 19:48:16 ----D---- C:\Program Files\Common Files\microsoft shared
2015-05-05 19:45:56 ----D---- C:\Program Files (x86)\MSBuild
2015-05-05 19:45:08 ----SD---- C:\ProgramData\Microsoft
2015-05-05 19:45:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-04-30 09:18:25 ----RD---- C:\Program Files (x86)\Skype
2015-04-30 09:14:41 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2015-04-30 09:14:20 ----D---- C:\Program Files (x86)\Java
2015-04-24 16:45:57 ----D---- C:\Counter-Strike 1.6
2015-04-20 08:06:48 ----D---- C:\WINDOWS\AppCompat
2015-04-19 17:13:04 ----D---- C:\WINDOWS\Minidump
2015-04-17 20:10:41 ----D---- C:\WINDOWS\Logs
2015-04-17 20:01:50 ----D---- C:\WINDOWS\system32\wbem
2015-04-15 11:58:25 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2015-04-15 11:35:36 ----D---- C:\Program Files (x86)\Registry Recycler
2015-04-14 17:44:01 ----D---- C:\ProgramData\Package Cache
2015-04-13 22:49:15 ----D---- C:\WINDOWS\system32\drivers\etc
2015-04-13 22:49:12 ----D---- C:\WINDOWS\system32\GroupPolicy
2015-04-12 13:26:07 ----D---- C:\ProgramData\hdgacbecipihjanjmahfcldombgfnpip
2015-04-12 11:37:12 ----D---- C:\Program Files (x86)\BlueStacks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-04-30 65736]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-04-30 272248]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-02 647736]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-05-20 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-05-28 31560]
R0 speedfan;speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-04-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-04-30 1047320]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-06-29 442264]
R1 dtsoftbus01;@oem19.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2014-04-28 283064]
R1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2014-10-11 917112]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2014-10-11 129168]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-04-30 29168]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-04-30 89944]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-04-30 137288]
R2 BstHdDrv;BlueStacks Hypervisor; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2015-03-24 144600]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\WINDOWS\system32\DRIVERS\RMCAST.sys [2014-10-29 144384]
R3 ACPIVPC;@oem12.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-05-20 33560]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 CnxtHdAudService;@oem28.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2013-07-10 1299648]
R3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2014-09-04 46136]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-25 4221440]
R3 IntcDAud;@oem26.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem34.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-03-17 25816]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-05-28 10995528]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-11-17 20800]
R3 nvvad_WaveExtensible;@oem50.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-10-03 38216]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-27 43832]
R3 SynTP;@oem4.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-27 448312]
R3 tap0901t;@oem45.inf,%DeviceDescription%;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2014-10-11 142528]
R3 VBoxNetFlt;@oem48.inf,%VBoxNetFltService_Desc%;VirtualBox Bridged Networking Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys [2014-10-11 157448]
S3 aswTap;@oem42.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\WINDOWS\system32\DRIVERS\aswTap.sys [2015-03-30 44640]
S3 AthBTPort;@oem11.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
S3 BTATH_A2DP;@oem10.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
S3 btath_avdt;@oem10.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]
S3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\system32\DRIVERS\btath_hcrp.sys [2013-01-25 179432]
S3 BTATH_LWFLT;@oem16.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
S3 BTATH_RCP;@oem18.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\system32\DRIVERS\btath_rcp.sys [2013-01-25 136424]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2015-02-27 22704]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-03-17 64216]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBVSTOR;@oem29.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
S3 ScreamBAudioSvc;@oem23.inf,%sbee_audio.SvcDesc%;ScreamBee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys [2009-11-26 38992]
S3 taphss6;@oem1.inf,%DeviceDescription%;Anchorfree HSS VPN Adapter; C:\WINDOWS\system32\DRIVERS\taphss6.sys [2014-05-17 42184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-06-12 82112]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-30 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 BstHdAndroidSvc;BlueStacks Android Service; C:\Program Files (x86)\BlueStacks\HD-Service.exe [2015-03-24 433880]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2015-03-24 388824]
R2 BstHdUpdaterSvc;BlueStacks Updater Service; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [2015-03-24 798424]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-09-30 294912]
R2 CxAudMsg;@C:\WINDOWS\system32\CxAudMsg64.exe,-100; C:\WINDOWS\system32\CxAudMsg64.exe [2013-07-25 206552]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-11-17 1149760]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-11-17 1796928]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-11-17 19821376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-05-28 937288]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2015-05-18 76152]
R2 SAService;Conexant SmartAudio service; C:\WINDOWS\system32\SAsrv.exe []
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-16 116648]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -s []
S2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe []
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-03-17 1080120]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-10 268464]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-25 279000]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2015-04-03 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2015-04-03 79360]
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-16 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-03-09 272440]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-06-04 148080]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-09 1997168]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2014-11-04 762320]

-----------------EOF-----------------

Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a připožte k vašemu příštímu postu. Zároveň přesiuvám vaše vlákno do správné sekce.

Přilkádám archiv

To je taková blbá chyba.
Měl bys nejprve otestovat operační paměť. Pokud bude OK, tak nakonfigurovat nástroj na ověřování ovladačů Verifier.
Také můžeš v Prohlížeči událostí vyexportovat protokol Systém do EVTX souboru a ten upnout.