VIRY.CZ

Dobrý den, prosím o kontrolu logu v pc jsem našel nějáké čínské programy o kterých vůbec nevím že jsem instaloval.

Logfile of random's system information tool 1.10 (written by random/random)
Run by foers at 2015-08-23 22:48:12
Microsoft Windows 10 Pro
System drive C: has 186 GB (78%) free of 238 GB
Total RAM: 4079 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:48:17, on 23.08.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCTray.exe
C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\plugins\QMNetMon\QQPCNetFlow.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRealTimeSpeedup.exe
C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\foers\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\qmdl.exe
C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
C:\Program Files\trend micro\foers.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=99963976_hao_pg
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: °®ĆćŇŐÖúĘÖ - {FB4F6285-4C32-49F2-950F-A5998F9CEC6C} - C:\IQIYI Video\Common\Accelerator\IEHelper.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [ QQPCTray] "C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCTRAY.EXE" /regrun /qqrepair
O4 - HKCU\..\Run: [OneDrive] "C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\foers\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\foers\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: QQPCMgr RTP Service (QQPCRTP) - Tencent - C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRTP.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TAOFrame - Tencent - C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TAOFrame.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8937 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k NetworkService
"C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRTP.exe" -r
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 701ec8ae-c02e-49ef-aeeb-78be0f1b26dc
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCTray.exe" /elevated /regrun
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
taskeng.exe {34A8C5B4-1469-45C4-A0BB-BEB5E8C361A5}
"C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe" -boot
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\plugins\QMNetMon\QQPCNetFlow.exe" /regrun /elevated
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRealTimeSpeedup.exe"
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
szndesktop.exe default start
"C:\Users\foers\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\foers\Desktop\ss.txt
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=7644
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=gpu-process --channel="7644.0.837904825\743091399" --crash-reporter-pid=5752 --enable-mse-h264-support --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,46,56 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --crash-reporter-pid=5752 --enable-mse-h264-support --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.2.1651919106\1705197423" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.3.103916842\1412964778" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.5.1468501918\542375562" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.6.1403562398\1447753684" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=ppapi --channel="7644.8.439059879\1821894188" --ppapi-flash-args --lang=cs --crash-reporter-pid=5752 --enable-mse-h264-support --ignored=" --type=renderer " /prefetch:-632637702

taskhostw.exe
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.12.997839088\54732264" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=5752 --enable-mse-h264-support --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="7644.14.276178973\1395512887" /prefetch:673131151

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Relaunch /Play "C:\Users\foers\Downloads\04 Crushed.mp3"
"C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\qmdl.exe"
"C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe" -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 616 620 628 8192 624
"C:\Users\foers\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe -check pepperplugin
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\OlSwG34SwwrhGas85AK.job - C:\Users\foers\AppData\Roaming\OlSwG34SwwrhGas85AK.exe --c=fBAdqbHVWqg8kzbx8cPaWJM/y73lizeY5l7iRb72/1fHUPe2L0u+pNNxsr6QLrxLD14zw5wxlO4vZ1JAOFMenZServb1gbUL0U0XM+vcxgMg+r42k9GPvVWg2gGvUCQRVKIhCkv4lEavwpXtGiTUZ10NKnlbDNbFaG3tQhX1YWJPKwNctDP8TUi+iPmTieXpeYbbebLFOmaHZvUi1dSH7tq8vXxjW9In4u3eEeYjvXKilaq2ytIt6i00+oF8Q0L+ZFNxRiNCaEOSy/P2jSRunlBVePa2J0NLjL0hlTcQJ48idQO6xNvfeCcpvR9LVF34bXKPHqMZeQ9DHMcWg/tyCQ==
C:\Windows\tasks\SlimDrivers Startup.job - C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe -boot

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B}]
电脑管家网页防火墙 - C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TSWebMon64.dat [2015-08-23 415584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}]
°®ĆćŇŐÖúĘÖ - C:\IQIYI Video\Common\Accelerator\IEHelper.dll [2015-04-29 326760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-07-24 1710568]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01 14040792]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2015-07-08 5595848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-23 404064]
"cz.seznam.software.autoupdate"=C:\Users\foers\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\foers\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
" QQPCTray"=C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCTRAY.EXE [2015-08-23 355296]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-23 22:19:34 ----D---- C:\ProgramData\IQIYI Video
2015-08-23 22:16:58 ----D---- C:\Users\foers\AppData\Roaming\IQIYI Video
2015-08-23 21:51:56 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-08-23 21:51:36 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-08-23 21:51:35 ----D---- C:\ProgramData\Malwarebytes
2015-08-23 21:51:35 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-23 21:51:35 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-08-23 21:51:35 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-08-23 21:28:49 ----A---- C:\Windows\SYSWOW64\drivers\TS888x64.sys
2015-08-23 20:50:32 ----D---- C:\rsit
2015-08-23 20:50:32 ----D---- C:\Program Files\trend micro
2015-08-23 20:11:59 ----D---- C:\Users\foers\AppData\Roaming\ESET
2015-08-23 20:10:53 ----D---- C:\ProgramData\ESET
2015-08-23 20:10:53 ----D---- C:\Program Files\ESET
2015-08-23 20:02:11 ----D---- C:\ProgramData\TXQMPC
2015-08-23 20:01:24 ----A---- C:\Windows\system32\drivers\TAOAccelerator64.sys
2015-08-23 20:01:14 ----D---- C:\Program Files\Common Files\Tencent
2015-08-23 20:00:49 ----A---- C:\Windows\system32\drivers\TAOKernel64.sys
2015-08-23 20:00:46 ----A---- C:\Windows\system32\drivers\TFsFltX64.sys
2015-08-23 20:00:11 ----D---- C:\Users\foers\AppData\Roaming\Tencent
2015-08-23 20:00:11 ----D---- C:\Program Files (x86)\Tencent
2015-08-23 20:00:06 ----D---- C:\ProgramData\Tencent
2015-08-23 19:32:52 ----A---- C:\InstallConfig.ini
2015-08-23 19:32:07 ----D---- C:\ProgramData\LocalStorage
2015-08-23 19:30:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-23 19:29:38 ----D---- C:\Program Files (x86)\6949a848-fd16-4950-ad3a-5f859cf2add1
2015-08-23 19:29:22 ----D---- C:\Program Files (x86)\globalUpdate
2015-08-23 19:28:55 ----D---- C:\Program Files (x86)\Seznam.cz
2015-08-23 19:28:53 ----D---- C:\Qiyi
2015-08-23 19:28:39 ----D---- C:\Users\foers\AppData\Roaming\ppslog
2015-08-23 19:28:38 ----D---- C:\Users\foers\AppData\Roaming\Seznam.cz
2015-08-23 19:28:35 ----D---- C:\qycache
2015-08-23 19:28:35 ----D---- C:\ppsfile
2015-08-23 19:28:14 ----D---- C:\IQIYI Video
2015-08-23 19:26:46 ----D---- C:\Program Files (x86)\baidu
2015-08-23 19:20:26 ----D---- C:\Program Files (x86)\Google
2015-08-23 18:39:43 ----D---- C:\Users\foers\AppData\Roaming\WinRAR
2015-08-23 18:39:16 ----D---- C:\Program Files\WinRAR
2015-08-23 18:25:33 ----D---- C:\Users\foers\AppData\Roaming\uTorrent
2015-08-23 17:23:24 ----D---- C:\Program Files (x86)\World of Warcraft
2015-08-23 17:22:26 ----D---- C:\Users\foers\AppData\Roaming\Battle.net
2015-08-23 17:22:21 ----D---- C:\ProgramData\Blizzard Entertainment
2015-08-23 17:22:21 ----D---- C:\Program Files (x86)\Battle.net
2015-08-23 17:21:46 ----D---- C:\ProgramData\Battle.net
2015-08-23 17:18:02 ----D---- C:\Users\foers\AppData\Roaming\Opera Software
2015-08-23 17:17:37 ----D---- C:\Program Files (x86)\Opera
2015-08-23 17:13:47 ----D---- C:\Windows\Panther
2015-08-23 17:13:32 ----D---- C:\Windows\LastGood.Tmp
2015-08-23 17:13:21 ----A---- C:\Windows\system32\SRSWOW64.dll
2015-08-23 17:13:21 ----A---- C:\Windows\system32\SRSTSX64.dll
2015-08-23 17:13:21 ----A---- C:\Windows\system32\SRSTSH64.dll
2015-08-23 17:13:21 ----A---- C:\Windows\system32\SRSHP64.dll
2015-08-23 17:13:18 ----A---- C:\Windows\system32\RtPgEx64.dll
2015-08-23 17:13:17 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2015-08-23 17:13:15 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-08-23 17:13:15 ----A---- C:\Windows\system32\RtkApi64.dll
2015-08-23 17:13:14 ----A---- C:\Windows\system32\RTEEP64A.dll
2015-08-23 17:13:14 ----A---- C:\Windows\system32\RTEEL64A.dll
2015-08-23 17:13:14 ----A---- C:\Windows\system32\RTEEG64A.dll
2015-08-23 17:13:14 ----A---- C:\Windows\system32\RTEED64A.dll
2015-08-23 17:13:13 ----A---- C:\Windows\system32\RtDataProc64.dll
2015-08-23 17:13:12 ----A---- C:\Windows\system32\RTCOM64.dll
2015-08-23 17:13:11 ----A---- C:\Windows\system32\RP3DHT64.dll
2015-08-23 17:13:11 ----A---- C:\Windows\system32\RP3DAA64.dll
2015-08-23 17:13:11 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-08-23 17:13:09 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-08-23 17:13:05 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2015-08-23 17:13:05 ----A---- C:\Windows\system32\MBppld64.dll
2015-08-23 17:13:05 ----A---- C:\Windows\system32\MBPPCn64.dll
2015-08-23 17:13:05 ----A---- C:\Windows\system32\MBAPO64.dll
2015-08-23 17:13:00 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2015-08-23 17:12:59 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2015-08-23 17:12:55 ----A---- C:\Windows\system32\FMAPO64.dll
2015-08-23 17:12:48 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-08-23 17:12:47 ----A---- C:\Windows\system32\AERTAR64.dll
2015-08-23 17:12:47 ----A---- C:\Windows\system32\AERTAC64.dll
2015-08-23 17:12:22 ----D---- C:\Program Files\Realtek
2015-08-23 17:12:08 ----A---- C:\Windows\RtlExUpd.dll
2015-08-23 17:11:44 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-08-23 17:11:42 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2015-08-23 17:11:39 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-08-23 17:11:36 ----A---- C:\Windows\system32\MBWrp64.dll
2015-08-23 17:09:15 ----D---- C:\Program Files\Synaptics
2015-08-23 17:08:59 ----A---- C:\Windows\system32\WdfCoInstaller01011.dll
2015-08-23 17:08:59 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2015-08-23 17:07:44 ----HD---- C:\Program Files (x86)\Temp
2015-08-23 17:04:21 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-08-23 17:04:21 ----A---- C:\Windows\system32\drivers\rt640x64.sys
2015-08-23 17:04:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-08-23 17:04:17 ----D---- C:\Program Files (x86)\Realtek
2015-08-23 16:57:39 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-08-23 16:57:39 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-08-23 16:57:39 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-08-23 16:57:39 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-08-23 16:57:38 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-08-23 16:57:38 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-08-23 16:57:35 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-08-23 16:57:35 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-08-23 16:57:35 ----A---- C:\Windows\system32\nvspcap64.dll
2015-08-23 16:57:35 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-08-23 16:56:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-08-23 16:54:43 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-08-23 16:54:43 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-08-23 16:54:43 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-08-23 16:54:42 ----A---- C:\Windows\system32\nvhdap64.dll
2015-08-23 16:54:41 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-08-23 16:54:41 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-08-23 16:54:41 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-08-23 16:54:41 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-08-23 16:54:41 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-08-23 16:54:41 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-08-23 16:54:40 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-08-23 16:54:40 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-08-23 16:54:40 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-08-23 16:54:40 ----A---- C:\Windows\system32\nvopencl.dll
2015-08-23 16:54:40 ----A---- C:\Windows\system32\nvoglv64.dll
2015-08-23 16:54:40 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-08-23 16:54:40 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-08-23 16:54:39 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvinitx.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\NvIFR64.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\NvFBC64.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvdispgenco6435362.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvdispco6435362.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvcuvid.dll
2015-08-23 16:54:39 ----A---- C:\Windows\system32\nvcuda.dll
2015-08-23 16:54:36 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-08-23 16:54:36 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-08-23 16:54:36 ----A---- C:\Windows\system32\nvcompiler.dll
2015-08-23 16:54:36 ----A---- C:\Windows\system32\nvapi64.dll
2015-08-23 16:53:31 ----D---- C:\NVIDIA
2015-08-23 16:42:32 ----N---- C:\Windows\system32\MpSigStub.exe
2015-08-23 16:40:38 ----D---- C:\ProgramData\SlimWare Utilities, Inc
2015-08-23 16:40:04 ----A---- C:\Windows\system32\drivers\SWDUMon.sys
2015-08-23 16:39:55 ----D---- C:\Program Files (x86)\SlimDrivers
2015-08-23 16:39:32 ----D---- C:\Windows\system32\MRT
2015-08-23 16:39:29 ----A---- C:\Windows\system32\MRT.exe
2015-08-23 16:39:19 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-23 16:39:18 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2015-08-23 16:39:15 ----A---- C:\Windows\system32\edgehtml.dll
2015-08-23 16:39:14 ----A---- C:\Windows\system32\mshtml.dll
2015-08-23 16:39:12 ----A---- C:\Windows\system32\twinui.dll
2015-08-23 16:39:10 ----A---- C:\Windows\system32\shell32.dll
2015-08-23 16:39:09 ----A---- C:\Windows\system32\wmp.dll
2015-08-23 16:39:09 ----A---- C:\Windows\system32\windows.storage.dll
2015-08-23 16:39:08 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-08-23 16:39:08 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2015-08-23 16:39:08 ----A---- C:\Windows\system32\ieframe.dll
2015-08-23 16:39:07 ----A---- C:\Windows\SYSWOW64\twinui.dll
2015-08-23 16:39:06 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-23 16:39:05 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-23 16:39:04 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2015-08-23 16:39:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-23 16:39:02 ----A---- C:\Windows\SYSWOW64\Windows.UI.Search.dll
2015-08-23 16:39:00 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-08-23 16:38:59 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-23 16:38:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-08-23 16:38:57 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-08-23 16:38:57 ----A---- C:\Windows\system32\ClipUp.exe
2015-08-23 16:38:55 ----A---- C:\Windows\system32\actxprxy.dll
2015-08-23 16:38:54 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2015-08-23 16:38:54 ----A---- C:\Windows\system32\Windows.Media.dll
2015-08-23 16:38:53 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-08-23 16:38:53 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-23 16:38:53 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-08-23 16:38:52 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2015-08-23 16:38:52 ----A---- C:\Windows\system32\twinui.appcore.dll
2015-08-23 16:38:52 ----A---- C:\Windows\system32\LicenseManager.dll
2015-08-23 16:38:51 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-08-23 16:38:51 ----A---- C:\Windows\system32\msftedit.dll
2015-08-23 16:38:51 ----A---- C:\Windows\system32\ExplorerFrame.dll
2015-08-23 16:38:51 ----A---- C:\Windows\system32\DWrite.dll
2015-08-23 16:38:50 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2015-08-23 16:38:50 ----A---- C:\Windows\system32\msi.dll
2015-08-23 16:38:48 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2015-08-23 16:38:48 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-23 16:38:48 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-08-23 16:38:47 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-08-23 16:38:47 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2015-08-23 16:38:46 ----A---- C:\Windows\system32\winmde.dll
2015-08-23 16:38:46 ----A---- C:\Windows\system32\wininet.dll
2015-08-23 16:38:46 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2015-08-23 16:38:46 ----A---- C:\Windows\system32\tquery.dll
2015-08-23 16:38:46 ----A---- C:\Windows\system32\d3d9.dll
2015-08-23 16:38:45 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-08-23 16:38:45 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2015-08-23 16:38:45 ----A---- C:\Windows\system32\mssrch.dll
2015-08-23 16:38:45 ----A---- C:\Windows\system32\dosvc.dll
2015-08-23 16:38:44 ----A---- C:\Windows\system32\UIRibbon.dll
2015-08-23 16:38:44 ----A---- C:\Windows\system32\FntCache.dll
2015-08-23 16:38:44 ----A---- C:\Windows\system32\drivers\ntfs.sys
2015-08-23 16:38:43 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2015-08-23 16:38:43 ----A---- C:\Windows\system32\modernexecserver.dll
2015-08-23 16:38:42 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-23 16:38:42 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2015-08-23 16:38:42 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2015-08-23 16:38:42 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-08-23 16:38:41 ----A---- C:\Windows\system32\wmpmde.dll
2015-08-23 16:38:41 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2015-08-23 16:38:41 ----A---- C:\Windows\system32\audiosrv.dll
2015-08-23 16:38:41 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2015-08-23 16:38:41 ----A---- C:\Windows\explorer.exe
2015-08-23 16:38:40 ----A---- C:\Windows\system32\RemoteNaturalLanguage.dll
2015-08-23 16:38:40 ----A---- C:\Windows\system32\mfsvr.dll
2015-08-23 16:38:40 ----A---- C:\Windows\system32\mfcore.dll
2015-08-23 16:38:40 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-23 16:38:40 ----A---- C:\Windows\system32\AppContracts.dll
2015-08-23 16:38:39 ----A---- C:\Windows\system32\WWAHost.exe
2015-08-23 16:38:39 ----A---- C:\Windows\system32\UserDataService.dll
2015-08-23 16:38:39 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2015-08-23 16:38:39 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-08-23 16:38:38 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2015-08-23 16:38:38 ----A---- C:\Windows\system32\wpncore.dll
2015-08-23 16:38:38 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-23 16:38:38 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-08-23 16:38:38 ----A---- C:\Windows\system32\Chakra.dll
2015-08-23 16:38:37 ----A---- C:\Windows\SYSWOW64\winmde.dll
2015-08-23 16:38:37 ----A---- C:\Windows\system32\RecoveryDrive.exe
2015-08-23 16:38:37 ----A---- C:\Windows\system32\LogonController.dll
2015-08-23 16:38:37 ----A---- C:\Windows\system32\diagtrack.dll
2015-08-23 16:38:36 ----A---- C:\Windows\SYSWOW64\Windows.UI.Cred.dll
2015-08-23 16:38:36 ----A---- C:\Windows\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-23 16:38:36 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-08-23 16:38:36 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2015-08-23 16:38:36 ----A---- C:\Windows\system32\wlidsvc.dll
2015-08-23 16:38:36 ----A---- C:\Windows\system32\urlmon.dll
2015-08-23 16:38:36 ----A---- C:\Windows\system32\SharedStartModel.dll
2015-08-23 16:38:35 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2015-08-23 16:38:35 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2015-08-23 16:38:35 ----A---- C:\Windows\SYSWOW64\explorer.exe
2015-08-23 16:38:35 ----A---- C:\Windows\system32\NotificationController.dll
2015-08-23 16:38:34 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-08-23 16:38:34 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-08-23 16:38:34 ----A---- C:\Windows\system32\Windows.UI.Cred.dll
2015-08-23 16:38:34 ----A---- C:\Windows\system32\SensorDataService.exe
2015-08-23 16:38:34 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2015-08-23 16:38:33 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2015-08-23 16:38:33 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2015-08-23 16:38:33 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-08-23 16:38:33 ----A---- C:\Windows\system32\schedsvc.dll
2015-08-23 16:38:33 ----A---- C:\Windows\system32\CoreMessaging.dll
2015-08-23 16:38:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-23 16:38:32 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2015-08-23 16:38:32 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2015-08-23 16:38:32 ----A---- C:\Windows\system32\twinapi.appcore.dll
2015-08-23 16:38:32 ----A---- C:\Windows\system32\PlayToManager.dll
2015-08-23 16:38:32 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-08-23 16:38:32 ----A---- C:\Windows\system32\mf.dll
2015-08-23 16:38:31 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-23 16:38:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-23 16:38:31 ----A---- C:\Windows\system32\CredProvDataModel.dll
2015-08-23 16:38:31 ----A---- C:\Windows\system32\ContactApis.dll
2015-08-23 16:38:30 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\InputService.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\iertutil.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\ClipSVC.dll
2015-08-23 16:38:30 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2015-08-23 16:38:29 ----A---- C:\Windows\system32\Unistore.dll
2015-08-23 16:38:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-23 16:38:27 ----A---- C:\Windows\system32\comdlg32.dll
2015-08-23 16:38:26 ----A---- C:\Windows\system32\winlogon.exe
2015-08-23 16:38:25 ----A---- C:\Windows\system32\Windows.Media.Editing.dll
2015-08-23 16:38:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2015-08-23 16:38:24 ----A---- C:\Windows\system32\win32kbase.sys
2015-08-23 16:38:23 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-08-23 16:38:22 ----A---- C:\Windows\system32\Windows.Devices.Sensors.dll
2015-08-23 16:38:21 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2015-08-23 16:38:21 ----A---- C:\Windows\SYSWOW64\AppContracts.dll
2015-08-23 16:38:21 ----A---- C:\Windows\system32\tileobjserver.dll
2015-08-23 16:38:19 ----A---- C:\Windows\system32\winload.exe
2015-08-23 16:38:18 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-08-23 16:38:17 ----A---- C:\Windows\SYSWOW64\tquery.dll
2015-08-23 16:38:16 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-23 16:38:16 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-23 16:38:15 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-08-23 16:38:15 ----A---- C:\Windows\system32\RDXService.dll
2015-08-23 16:38:14 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2015-08-23 16:38:13 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-23 16:38:13 ----A---- C:\Windows\system32\LockAppBroker.dll
2015-08-23 16:38:12 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2015-08-23 16:38:12 ----A---- C:\Windows\system32\dwmcore.dll
2015-08-23 16:38:06 ----A---- C:\Windows\system32\wuapi.dll
2015-08-23 16:38:05 ----A---- C:\Windows\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-08-23 16:38:04 ----A---- C:\Windows\system32\Windows.Cortana.Desktop.dll
2015-08-23 16:38:04 ----A---- C:\Windows\system32\SearchFolder.dll
2015-08-23 16:38:03 ----A---- C:\Windows\system32\gdi32.dll
2015-08-23 16:38:02 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Sensors.dll
2015-08-23 16:38:02 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2015-08-23 16:38:01 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2015-08-23 16:38:01 ----A---- C:\Windows\system32\AudioEng.dll
2015-08-23 16:38:00 ----A---- C:\Windows\SYSWOW64\LockAppBroker.dll
2015-08-23 16:38:00 ----A---- C:\Windows\system32\mfsrcsnk.dll
2015-08-23 16:38:00 ----A---- C:\Windows\system32\ieproxy.dll
2015-08-23 16:37:59 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-08-23 16:37:58 ----A---- C:\Windows\system32\Windows.Media.Import.dll
2015-08-23 16:37:58 ----A---- C:\Windows\system32\efscore.dll
2015-08-23 16:37:57 ----A---- C:\Windows\system32\win32kfull.sys
2015-08-23 16:37:55 ----A---- C:\Windows\SYSWOW64\Windows.Media.Editing.dll
2015-08-23 16:37:55 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2015-08-23 16:37:54 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-08-23 16:37:53 ----A---- C:\Windows\system32\wpnapps.dll
2015-08-23 16:37:53 ----A---- C:\Windows\system32\ntshrui.dll
2015-08-23 16:37:52 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2015-08-23 16:37:50 ----A---- C:\Windows\system32\ncsi.dll
2015-08-23 16:37:49 ----A---- C:\Windows\system32\winresume.exe
2015-08-23 16:37:48 ----A---- C:\Windows\SYSWOW64\VEEventDispatcher.dll
2015-08-23 16:37:48 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-23 16:37:48 ----A---- C:\Windows\system32\wimgapi.dll
2015-08-23 16:37:48 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-08-23 16:37:48 ----A---- C:\Windows\system32\facecredentialprovider.dll
2015-08-23 16:37:47 ----A---- C:\Windows\system32\provhandlers.dll
2015-08-23 16:37:46 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2015-08-23 16:37:46 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2015-08-23 16:37:45 ----A---- C:\Windows\SYSWOW64\Windows.Media.Import.dll
2015-08-23 16:37:45 ----A---- C:\Windows\SYSWOW64\MessagingDataModel2.dll
2015-08-23 16:37:45 ----A---- C:\Windows\system32\OmaDmAgent.dll
2015-08-23 16:37:44 ----A---- C:\Windows\system32\wwansvc.dll
2015-08-23 16:37:44 ----A---- C:\Windows\system32\LockAppHost.exe
2015-08-23 16:37:42 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-23 16:37:42 ----A---- C:\Windows\system32\ci.dll
2015-08-23 16:37:41 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-08-23 16:37:41 ----A---- C:\Windows\system32\Windows.UI.BioFeedback.dll
2015-08-23 16:37:39 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2015-08-23 16:37:39 ----A---- C:\Windows\system32\unenrollhook.dll
2015-08-23 16:37:39 ----A---- C:\Windows\system32\MapControlCore.dll
2015-08-23 16:37:37 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2015-08-23 16:37:34 ----A---- C:\Windows\SYSWOW64\SensorsApi.dll
2015-08-23 16:37:34 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2015-08-23 16:37:34 ----A---- C:\Windows\SYSWOW64\efscore.dll
2015-08-23 16:37:34 ----A---- C:\Windows\system32\SettingsHandlers_UserAccount.dll
2015-08-23 16:37:34 ----A---- C:\Windows\system32\provengine.dll
2015-08-23 16:37:34 ----A---- C:\Windows\system32\atmfd.dll
2015-08-23 16:37:33 ----A---- C:\Windows\SYSWOW64\Windows.UI.BioFeedback.dll
2015-08-23 16:37:33 ----A---- C:\Windows\system32\VEEventDispatcher.dll
2015-08-23 16:37:33 ----A---- C:\Windows\system32\ntdll.dll
2015-08-23 16:37:32 ----D---- C:\Users\foers\AppData\Roaming\Macromedia
2015-08-23 16:37:32 ----A---- C:\Windows\system32\mos.dll
2015-08-23 16:37:32 ----A---- C:\Windows\system32\hal.dll
2015-08-23 16:37:32 ----A---- C:\Windows\system32\drivers\refsv1.sys
2015-08-23 16:37:31 ----A---- C:\Windows\SYSWOW64\LockAppHost.exe
2015-08-23 16:37:31 ----A---- C:\Windows\system32\wuuhext.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\updatehandlers.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\stobject.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\SensorService.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\MFPlay.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\mfplat.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\drivers\pci.sys
2015-08-23 16:37:31 ----A---- C:\Windows\system32\AudioSes.dll
2015-08-23 16:37:31 ----A---- C:\Windows\system32\ActionCenter.dll
2015-08-23 16:37:30 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2015-08-23 16:37:30 ----A---- C:\Windows\SYSWOW64\stobject.dll
2015-08-23 16:37:30 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\SubscriptionMgr.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\srumsvc.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\SharedStartModelShim.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\SensorsApi.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\NetworkStatus.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\MCRecvSrc.dll
2015-08-23 16:37:30 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2015-08-23 16:37:30 ----A---- C:\Windows\system32\DevicesFlowBroker.dll
2015-08-23 16:37:29 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-08-23 16:37:29 ----A---- C:\Windows\SYSWOW64\InputService.dll
2015-08-23 16:37:29 ----A---- C:\Windows\system32\MessagingDataModel2.dll
2015-08-23 16:37:29 ----A---- C:\Windows\system32\MbaeApiPublic.dll
2015-08-23 16:37:29 ----A---- C:\Windows\system32\fontdrvhost.exe
2015-08-23 16:37:29 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2015-08-23 16:37:28 ----A---- C:\Windows\SYSWOW64\srumsvc.dll
2015-08-23 16:37:28 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2015-08-23 16:37:28 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\winhttp.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\WinBioDataModel.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\usocore.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\drivers\WdiWiFi.sys
2015-08-23 16:37:28 ----A---- C:\Windows\system32\directmanipulation.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\diagtrack_wininternal.dll
2015-08-23 16:37:28 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2015-08-23 16:37:27 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-08-23 16:37:27 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2015-08-23 16:37:27 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2015-08-23 16:37:27 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2015-08-23 16:37:27 ----A---- C:\Windows\system32\wintrust.dll
2015-08-23 16:37:27 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2015-08-23 16:37:27 ----A---- C:\Windows\system32\msctfuimanager.dll
2015-08-23 16:37:27 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-23 16:37:27 ----A---- C:\Windows\system32\DisplayManager.dll
2015-08-23 16:37:27 ----A---- C:\Windows\system32\diagtrack_win.dll
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\NotificationObjFactory.dll
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\msctfuimanager.dll
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\DisplayManager.dll
2015-08-23 16:37:26 ----A---- C:\Windows\SYSWOW64\directmanipulation.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\wcmsvc.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\VEDataLayerHelpers.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\TabSvc.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\psmsrv.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\NotificationObjFactory.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-08-23 16:37:26 ----A---- C:\Windows\system32\ConsoleLogon.dll
2015-08-23 16:37:25 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2015-08-23 16:37:25 ----A---- C:\Windows\SYSWOW64\VEDataLayerHelpers.dll
2015-08-23 16:37:25 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2015-08-23 16:37:25 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-23 16:37:25 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\Windows.Cortana.OneCore.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\uxtheme.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\StoreAgent.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\shutdownux.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2015-08-23 16:37:25 ----A---- C:\Windows\system32\MusNotification.exe
2015-08-23 16:37:25 ----A---- C:\Windows\system32\MbaeApi.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-23 16:37:25 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2015-08-23 16:37:25 ----A---- C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2015-08-23 16:37:24 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2015-08-23 16:37:24 ----A---- C:\Windows\SYSWOW64\sendmail.dll
2015-08-23 16:37:24 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2015-08-23 16:37:24 ----A---- C:\Windows\system32\wcmcsp.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\VPNv2CSP.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\sppcomapi.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\sendmail.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\ReAgent.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\omadmclient.exe
2015-08-23 16:37:24 ----A---- C:\Windows\system32\MusNotificationUx.exe
2015-08-23 16:37:24 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\LocationPermissions.dll
2015-08-23 16:37:24 ----A---- C:\Windows\system32\InstallAgent.exe
2015-08-23 16:37:24 ----A---- C:\Windows\system32\drivers\wof.sys
2015-08-23 16:37:24 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-08-23 16:37:24 ----A---- C:\Windows\system32\configmanager2.dll
2015-08-23 16:37:23 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\wininit.exe
2015-08-23 16:37:23 ----A---- C:\Windows\system32\TextInputFramework.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\systemcpl.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\sysmain.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\storewuauth.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\SettingsHandlers_Notifications.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\ReInfo.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\dwmapi.dll
2015-08-23 16:37:23 ----A---- C:\Windows\system32\drivers\dam.sys
2015-08-23 16:37:23 ----A---- C:\Windows\system32\bcastdvr.exe
2015-08-23 16:37:23 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-08-23 16:37:22 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\Windows.Cortana.ProxyStub.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\UserMgrProxy.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\SettingsHandlers_Privacy.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\notepad.exe
2015-08-23 16:37:22 ----A---- C:\Windows\system32\GamePanel.exe
2015-08-23 16:37:22 ----A---- C:\Windows\system32\fwpolicyiomgr.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\drivers\UcmUcsi.sys
2015-08-23 16:37:22 ----A---- C:\Windows\system32\coredpus.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\ConhostV2.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\cloudAP.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\calc.exe
2015-08-23 16:37:22 ----A---- C:\Windows\system32\BootMenuUX.dll
2015-08-23 16:37:22 ----A---- C:\Windows\system32\AppxSysprep.dll
2015-08-23 16:37:22 ----A---- C:\Windows\notepad.exe
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\MbaeApiPublic.dll
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\fwpolicyiomgr.dll
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\calc.exe
2015-08-23 16:37:21 ----A---- C:\Windows\SYSWOW64\bcd.dll
2015-08-23 16:37:21 ----A---- C:\Windows\system32\msiexec.exe
2015-08-23 16:37:21 ----A---- C:\Windows\system32\EditionUpgradeManagerObj.dll
2015-08-23 16:37:21 ----A---- C:\Windows\system32\dxgi.dll
2015-08-23 16:37:21 ----A---- C:\Windows\system32\drivers\wpcfltr.sys
2015-08-23 16:37:21 ----A---- C:\Windows\system32\drivers\cng.sys
2015-08-23 16:37:21 ----A---- C:\Windows\system32\bcd.dll
2015-08-23 16:37:20 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2015-08-23 16:37:20 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2015-08-23 16:37:20 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2015-08-23 16:37:20 ----A---- C:\Windows\SYSWOW64\hmkd.dll
2015-08-23 16:37:20 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\wer.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\VEStoreEventHandlers.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\UIRibbonRes.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\tetheringservice.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\syncutil.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2015-08-23 16:37:20 ----A---- C:\Windows\system32\rdbui.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\omadmprc.exe
2015-08-23 16:37:20 ----A---- C:\Windows\system32\NotificationControllerPS.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\MbaeParserTask.exe
2015-08-23 16:37:20 ----A---- C:\Windows\system32\LocationGeofences.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\LicenseManagerApi.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\hmkd.dll
2015-08-23 16:37:20 ----A---- C:\Windows\system32\drivers\usbser.sys
2015-08-23 16:37:20 ----A---- C:\Windows\system32\drivers\tunnel.sys
2015-08-23 16:37:20 ----A---- C:\Windows\system32\drivers\stornvme.sys
2015-08-23 16:37:20 ----A---- C:\Windows\system32\drivers\msgpiowin32.sys
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\VoiceActivationManager.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-23 16:37:19 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\wuautoappupdate.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\wimserv.exe
2015-08-23 16:37:19 ----A---- C:\Windows\system32\VoiceActivationManager.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\spbcd.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\SensorsNativeApi.V2.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\mfps.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\LocationFramework.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\LicenseManagerShellext.exe
2015-08-23 16:37:19 ----A---- C:\Windows\system32\drivers\storport.sys
2015-08-23 16:37:19 ----A---- C:\Windows\system32\drivers\acpi.sys
2015-08-23 16:37:19 ----A---- C:\Windows\system32\BingMaps.dll
2015-08-23 16:37:19 ----A---- C:\Windows\system32\bcdedit.exe
2015-08-23 16:37:19 ----A---- C:\Windows\system32\bcdboot.exe
2015-08-23 16:37:19 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2015-08-23 16:37:18 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-23 16:37:18 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2015-08-23 16:37:18 ----A---- C:\Windows\SYSWOW64\tetheringclient.dll
2015-08-23 16:37:18 ----A---- C:\Windows\SYSWOW64\ReInfo.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\wpccpl.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\tetheringclient.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\reseteng.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\mssprxy.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\MapsStore.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\LocationFrameworkInternalPS.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\jscript9.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-08-23 16:37:18 ----A---- C:\Windows\system32\drivers\bthhfenum.sys
2015-08-23 16:37:17 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 16:37:17 ----A---- C:\Windows\SYSWOW64\GamePanel.exe
2015-08-23 16:37:17 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-23 16:37:17 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 16:37:17 ----A---- C:\Windows\system32\atmlib.dll
2015-08-23 16:37:04 ----A---- C:\Windows\system32\drivers\TeeDriverW8x64.sys
2015-08-23 16:31:55 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-23 16:30:10 ----D---- C:\ProgramData\NVIDIA
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvvsvc.exe
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvsvcr.dll
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvsvc64.dll
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvshext.dll
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvmctray.dll
2015-08-23 16:29:49 ----A---- C:\Windows\system32\nvcpl.dll
2015-08-23 16:29:35 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-08-23 16:29:35 ----A---- C:\Windows\system32\OpenCL.dll
2015-08-23 16:29:19 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-23 16:29:13 ----D---- C:\Users\foers\AppData\Roaming\Adobe
2015-08-23 16:29:13 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-23 16:29:13 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-08-23 16:28:50 ----A---- C:\Windows\system32\nvdispgenco6435354.dll
2015-08-23 16:28:50 ----A---- C:\Windows\system32\nvdispco6435354.dll
2015-08-23 16:28:21 ----SD---- C:\Users\foers\AppData\Roaming\Microsoft
2015-08-23 16:27:34 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-08-23 16:23:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-23 16:19:53 ----D---- C:\Windows\CSC
2015-08-23 16:18:40 ----SHD---- C:\ProgramData\Šablony
2015-08-23 16:18:40 ----SHD---- C:\ProgramData\Plocha
2015-08-23 16:18:40 ----SHD---- C:\ProgramData\Nabídka Start
2015-08-23 16:18:40 ----SHD---- C:\ProgramData\Dokumenty
2015-08-23 16:18:40 ----SHD---- C:\ProgramData\Data aplikací
2015-08-23 16:18:09 ----ASH---- C:\hiberfil.sys
2015-08-23 16:17:26 ----D---- C:\Windows\SoftwareDistribution
2015-08-23 16:17:17 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2015-08-23 16:16:54 ----SHD---- C:\Recovery
2015-08-23 16:14:58 ----D---- C:\Windows\Prefetch
2015-08-23 16:14:29 ----ASH---- C:\swapfile.sys
2015-08-23 16:14:29 ----ASH---- C:\pagefile.sys
2015-08-23 16:14:27 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======

2015-08-23 22:43:09 ----D---- C:\Windows\Temp
2015-08-23 22:21:01 ----D---- C:\Windows\System32
2015-08-23 22:21:01 ----D---- C:\Windows\INF
2015-08-23 22:19:34 ----HD---- C:\ProgramData
2015-08-23 22:16:32 ----D---- C:\Windows\system32\WDI
2015-08-23 22:15:12 ----D---- C:\Windows\system32\drivers
2015-08-23 22:14:10 ----D---- C:\Windows\system32\sru
2015-08-23 22:13:28 ----D---- C:\Windows\Tasks
2015-08-23 22:12:28 ----RD---- C:\Program Files (x86)
2015-08-23 22:12:21 ----D---- C:\Windows\system32\Tasks
2015-08-23 22:12:19 ----RSD---- C:\Windows\Fonts
2015-08-23 21:28:49 ----D---- C:\Windows\SYSWOW64\drivers
2015-08-23 20:50:32 ----RD---- C:\Program Files
2015-08-23 20:11:51 ----SHD---- C:\Windows\Installer
2015-08-23 20:11:26 ----D---- C:\Windows\system32\DriverStore
2015-08-23 20:02:25 ----D---- C:\Windows\system32\config
2015-08-23 20:01:14 ----D---- C:\Program Files\Common Files
2015-08-23 20:00:45 ----D---- C:\Program Files (x86)\Common Files
2015-08-23 20:00:21 ----D---- C:\Windows\WinSxS
2015-08-23 19:31:13 ----SD---- C:\ProgramData\Microsoft
2015-08-23 19:29:18 ----D---- C:\Windows\SysWOW64
2015-08-23 19:28:37 ----SHD---- C:\$Recycle.Bin
2015-08-23 18:22:07 ----D---- C:\Windows\Microsoft.NET
2015-08-23 18:21:56 ----HD---- C:\Program Files\WindowsApps
2015-08-23 18:21:48 ----RD---- C:\Windows\assembly
2015-08-23 17:47:20 ----D---- C:\Windows\AppReadiness
2015-08-23 17:14:27 ----D---- C:\Windows
2015-08-23 17:09:44 ----D---- C:\Windows\system32\CatRoot
2015-08-23 16:58:28 ----D---- C:\Windows\SYSWOW64\oobe
2015-08-23 16:58:28 ----D---- C:\Windows\SYSWOW64\Dism
2015-08-23 16:58:28 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-23 16:58:23 ----D---- C:\Windows\system32\WinBioPlugIns
2015-08-23 16:58:23 ----D---- C:\Windows\system32\SystemResetPlatform
2015-08-23 16:58:23 ----D---- C:\Windows\system32\oobe
2015-08-23 16:58:23 ----D---- C:\Windows\system32\migration
2015-08-23 16:58:23 ----D---- C:\Windows\system32\drivers\UMDF
2015-08-23 16:58:23 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-23 16:58:23 ----D---- C:\Windows\system32\Dism
2015-08-23 16:58:23 ----D---- C:\Windows\system32\cs-CZ
2015-08-23 16:58:23 ----D---- C:\Windows\system32\Boot
2015-08-23 16:58:23 ----D---- C:\Windows\system32\appraiser
2015-08-23 16:58:22 ----RD---- C:\Windows\PurchaseDialog
2015-08-23 16:58:22 ----RD---- C:\Windows\ImmersiveControlPanel
2015-08-23 16:58:22 ----RD---- C:\Windows\DevicesFlow
2015-08-23 16:58:22 ----D---- C:\Windows\Provisioning
2015-08-23 16:58:22 ----D---- C:\Windows\AppPatch
2015-08-23 16:58:22 ----D---- C:\Program Files\Internet Explorer
2015-08-23 16:58:22 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-23 16:57:36 ----D---- C:\Windows\Logs
2015-08-23 16:46:56 ----D---- C:\Users
2015-08-23 16:42:32 ----D---- C:\Windows\CbsTemp
2015-08-23 16:36:49 ----D---- C:\Windows\system32\catroot2
2015-08-23 16:35:56 ----D---- C:\Windows\system32\CodeIntegrity
2015-08-23 16:30:04 ----RD---- C:\Windows\PrintDialog
2015-08-23 16:30:04 ----RD---- C:\Windows\MiracastView
2015-08-23 16:29:49 ----D---- C:\Windows\Help
2015-08-23 16:27:11 ----D---- C:\Windows\rescache
2015-08-23 16:22:57 ----D---- C:\Windows\system32\restore
2015-08-23 16:22:54 ----D---- C:\Windows\system32\wbem
2015-08-23 16:21:36 ----D---- C:\Windows\debug
2015-08-23 16:21:32 ----D---- C:\Windows\system32\spool
2015-08-23 16:19:57 ----D---- C:\Windows\system32\FxsTmp
2015-08-23 16:18:41 ----D---- C:\Program Files\Windows NT
2015-08-23 16:16:54 ----D---- C:\Windows\system32\Recovery
2015-08-23 16:16:52 ----D---- C:\Windows\system32\Sysprep
2015-08-08 17:38:46 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2015-07-14 251632]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-07-14 72400]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 EpfwLWF;@oem20.inf,%EpfwLWF_Desc%;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-07-14 53360]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 QMUdisk;tencent QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QMUdisk64.sys [2015-08-23 62264]
R1 TAOKernelDriver;Tencent Auto Optimize Platform.; C:\Windows\System32\Drivers\TAOKernel64.sys [2015-08-23 274232]
R1 TSSysKit;TSSysKit; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TSSysKit64.sys [2015-08-23 87352]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-07-14 231520]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 QQSysMonX64;QQSysMonX64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQSysMonX64.sys [2015-08-23 138040]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-07-10 61952]
R2 TAOAccelerator;Tencent TAOAccelerator driver.; \??\C:\Windows\system32\Drivers\TAOAccelerator64.sys [2015-08-23 74040]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4514008]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-04-14 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-08-23 136408]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-04-14 64216]
R3 MEIx64;@oem6.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-08-23 193336]
R3 NVHDA;@oem8.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-07-25 204648]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem10.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 rt640x64;@oem13.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2000-01-01 895256]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2000-01-01 33960]
R3 TFsFlt;TFsFlt; C:\Windows\system32\Drivers\TFsFltX64.sys [2015-08-23 87864]
R3 TS888x64;TS888x64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TS888x64.sys [2015-08-23 28984]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-07-10 40288]
S1 TSDefenseBt;TSDefenseBt; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TSDefenseBT64.sys [2015-08-23 28472]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\Windows\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2015-08-23 16056]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\Windows\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\Windows\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\Windows\System32\drivers\usbser.sys [2015-07-24 67072]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\Windows\System32\drivers\vhf.sys [2015-07-10 31744]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2015-07-08 1353720]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-04-14 1871160]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-07-23 937800]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 QQPCRTP;QQPCMgr RTP Service; C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRTP.exe [2015-08-23 301728]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-07-23 410768]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-23 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-23 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-23 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\lsass.exe [2015-07-10 56344]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 TAOFrame;TAOFrame; C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TAOFrame.exe [2015-08-23 293856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\Windows\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner[C?].txt, ten sem vlozte

Vyčištění proběhlo bez problémů a programy jsou pryč zde posílám log:

# AdwCleaner v5.003 - Logfile created 24/08/2015 at 11:24:14
# Updated 20/08/2015 by Xplode
# Database : 2015-08-23.3 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : foers - DESKTOP-C9LD40V
# Running from : C:\Users\foers\Downloads\adwcleaner_5.003.exe
# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : QQPCRTP
[-] Service Deleted : TAOAccelerator
[-] Service Deleted : TSDefenseBt
[-] Service Deleted : TSSysKit
[-] Service Deleted : QMUdisk
[-] Service Deleted : TS888x64
[-] Service Deleted : QQSysMonX64
[-] Service Deleted : TFsFlt
[-] Service Deleted : TAOFrame
[-] Service Deleted : TAOKernelDriver

***** [ Folders ] *****

[-] Folder Deleted : C:\IQIYI Video
[-] Folder Deleted : C:\QiYi
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[#] Folder Deleted : C:\Program Files (x86)\tencent
[-] Folder Deleted : C:\Program Files (x86)\Common Files\tencent
[#] Folder Deleted : C:\Program Files\Common Files\tencent
[#] Folder Deleted : C:\ProgramData\tencent
[-] Folder Deleted : C:\ProgramData\TXQMPC
[-] Folder Deleted : C:\Users\foers\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\foers\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\foers\AppData\Local\Temp\tencent
[#] Folder Deleted : C:\Users\foers\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????
[-] Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\tencent

***** [ Files ] *****

[-] File Deleted : C:\Users\foers\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\???PPS??.LNK
[-] File Deleted : C:\Windows\Sysnative\drivers\TAOAccelerator64.sys
[-] File Deleted : C:\Windows\Sysnative\drivers\TAOKernel64.sys
[-] File Deleted : C:\Windows\Sysnative\drivers\TFsFltX64.sys
[-] File Deleted : C:\Windows\SysWOW64\drivers\TS888x64.sys

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\METNSD
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Key Deleted : HKCU\Software\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npWebPlayer
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npclient
[-] Key Deleted : HKLM\SOFTWARE\Classes\qygameclient
[-] Key Deleted : HKLM\SOFTWARE\Classes\HCDNProxy
[-] Key Deleted : HKLM\SOFTWARE\5be46b74-4ed4-4f6b-b611-afd2de778b10
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{085CB97F-6D0B-487D-B94C-E11A736C38CE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{307B3CDB-9EE3-4137-9D18-F9AD6537ECEB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B6360BD3-5CD0-40D3-BD87-DAFF37889F50}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E1D75F62-CBBD-45C7-9D1D-6B5ECEC2E006}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E6F928E4-B672-4F3A-8CA2-53C4259235DE}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6BE0FB-8B18-4DFC-959F-233651CC4D7F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAC94FEE-45B4-4FD4-9EEA-D8978EC96C6E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{085CB97F-6D0B-487D-B94C-E11A736C38CE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5EC7C511-CD0F-42E6-830C-1BD9882F3458}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D96C1D26-5CDF-4506-9244-57233C3984DF}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E6A8DA1-1731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6A8DA1-2731-465B-B036-B9E16EF26CAC}
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKCU\Software\QyGameClient
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IQIYI Video
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\SlimWare Utilities Inc
[!] Key Not Deleted : [x64] HKCU\Software\QyGameClient
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tab]

***** [ Web browsers ] *****


*************************

:: Proxy settings cleared
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [9973 bytes] ##########

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=30&t=133101

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-08-2015
Ran by foers (administrator) on DESKTOP-C9LD40V (24-08-2015 12:29:37)
Running from C:\Users\foers\Desktop
Loaded Profiles: foers (Available Profiles: foers)
Platform: Windows 10 Pro (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe
() C:\Users\foers\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\foers\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(forum.viry.cz) C:\Users\foers\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-07-08] (ESET)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCTRAY.EXE" /regrun /qqrepair
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-584830501-2266606231-1902869321-1001\...\Run: [OneDrive] => C:\Users\foers\AppData\Local\Microsoft\OneDrive\OneDrive.exe [404064 2015-08-23] (Microsoft Corporation)
HKU\S-1-5-21-584830501-2266606231-1902869321-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\foers\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-584830501-2266606231-1902869321-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\foers\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QMGCShellExt64.dll No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-584830501-2266606231-1902869321-1001\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{1f0a110b-f1c3-423d-abd8-2dece49c33d9}: [DhcpNameServer] 213.46.172.37 213.46.172.36

FireFox:
========
FF Plugin: @iqiyi.com/npclient -> C:\IQIYI Video\LStyle\npclient.dll [No File]
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @qq.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\npQMExtensionsMozilla.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-23] (Google Inc.)
FF Plugin HKU\S-1-5-21-584830501-2266606231-1902869321-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\foers\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-07-22] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-07-22] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1353720 2015-07-08] (ESET)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-11] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [996352 2015-08-11] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-07-12] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-07-24] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-07-24] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [255240 2015-07-14] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [251632 2015-07-14] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [178520 2015-07-14] (ESET)
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [231520 2015-07-14] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [53360 2015-07-14] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [72400 2015-07-14] (ESET)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-24] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-08-23] (Intel Corporation)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2000-01-01] (Realtek )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33960 2000-01-01] (Synaptics Incorporated)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-08-24] (SlimWare Utilities, Inc.)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-07-14] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S1 TSDefenseBt; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TSDefenseBT64.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-24 12:29 - 2015-08-24 12:30 - 00016382 _____ C:\Users\foers\Desktop\FRST.txt
2015-08-24 12:29 - 2015-08-24 12:29 - 00000000 ____D C:\FRST
2015-08-24 12:28 - 2015-08-24 12:28 - 00112640 _____ (forum.viry.cz) C:\Users\foers\Desktop\FRSTLauncher.exe
2015-08-24 12:27 - 2015-08-24 12:27 - 02173952 _____ (Farbar) C:\Users\foers\Desktop\FRST64.exe
2015-08-24 12:26 - 2015-08-24 12:26 - 00016148 _____ C:\Windows\system32\DESKTOP-C9LD40V_foers_HistoryPrediction.bin
2015-08-24 11:28 - 2015-08-24 11:28 - 00016056 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2015-08-24 11:27 - 2015-08-24 11:27 - 00000000 ____D C:\Users\foers\AppData\Local\SlimWare Utilities Inc
2015-08-24 11:26 - 2015-08-24 11:26 - 00000000 ____D C:\ProgramData\TXQMPC
2015-08-24 11:22 - 2015-08-24 11:24 - 00000000 ____D C:\AdwCleaner
2015-08-24 11:21 - 2015-08-24 11:21 - 01605632 _____ C:\Users\foers\Desktop\adwcleaner_5.003.exe
2015-08-23 23:24 - 2015-08-23 23:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-08-23 23:06 - 2015-08-23 23:06 - 00061107 _____ C:\Users\foers\Downloads\msc.rar
2015-08-23 22:21 - 2015-08-24 01:07 - 11541521 _____ (Malwarebytes Corporation ) C:\Users\foers\Downloads\mbam-setup-sem-2.1.6.1022 (1).exe.opdownload
2015-08-23 21:51 - 2015-08-24 11:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-23 21:51 - 2015-08-24 00:50 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-23 21:51 - 2015-08-24 00:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-23 21:51 - 2015-08-24 00:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-23 21:51 - 2015-08-23 21:51 - 21545336 _____ (Malwarebytes Corporation ) C:\Users\foers\Downloads\mbam-setup-sem-2.1.6.1022.exe
2015-08-23 21:51 - 2015-08-23 21:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-23 21:51 - 2015-06-18 09:48 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-23 21:51 - 2015-06-18 09:47 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-23 21:51 - 2015-06-18 09:47 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-23 21:33 - 2015-08-23 21:33 - 01660616 _____ (ESET) C:\Users\foers\Downloads\eset_smart_security_live_installer_ (1).exe
2015-08-23 21:25 - 2015-08-23 22:50 - 00000069 _____ C:\Users\foers\Desktop\ss.txt
2015-08-23 20:50 - 2015-08-23 22:48 - 00000000 ____D C:\Program Files\trend micro
2015-08-23 20:50 - 2015-08-23 20:50 - 01222144 _____ C:\Users\foers\Downloads\RSITx64.exe
2015-08-23 20:50 - 2015-08-23 20:50 - 00000000 ____D C:\rsit
2015-08-23 20:11 - 2015-08-23 20:11 - 00000000 ____D C:\Users\foers\AppData\Roaming\ESET
2015-08-23 20:11 - 2015-08-23 20:11 - 00000000 ____D C:\Users\foers\AppData\Local\ESET
2015-08-23 20:10 - 2015-08-23 20:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-08-23 20:10 - 2015-08-23 20:10 - 00000000 ____D C:\ProgramData\ESET
2015-08-23 20:10 - 2015-08-23 20:10 - 00000000 ____D C:\Program Files\ESET
2015-08-23 20:06 - 2015-08-23 20:06 - 01660616 _____ (ESET) C:\Users\foers\Downloads\eset_smart_security_live_installer_.exe
2015-08-23 20:00 - 2015-08-24 11:26 - 00000000 ____D C:\ProgramData\Tencent
2015-08-23 20:00 - 2015-08-23 20:00 - 00087864 ____N (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
2015-08-23 19:48 - 2015-08-23 20:29 - 00000000 ____D C:\Users\foers\AppData\Local\32521
2015-08-23 19:32 - 2015-08-23 19:32 - 00000048 _____ C:\InstallConfig.ini
2015-08-23 19:32 - 2015-08-23 19:32 - 00000000 ____D C:\ProgramData\LocalStorage
2015-08-23 19:31 - 2015-08-23 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-23 19:30 - 2015-08-24 11:27 - 00001042 _____ C:\Windows\Tasks\OlSwG34SwwrhGas85AK.job
2015-08-23 19:30 - 2015-08-23 19:30 - 02870984 _____ (ESET) C:\Users\foers\Downloads\esetsmartinstaller_csy.exe
2015-08-23 19:30 - 2015-08-23 19:30 - 00004184 _____ C:\Windows\System32\Tasks\OlSwG34SwwrhGas85AK
2015-08-23 19:30 - 2015-08-23 19:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-23 19:29 - 2015-08-23 20:04 - 00000000 ____D C:\Program Files (x86)\6949a848-fd16-4950-ad3a-5f859cf2add1
2015-08-23 19:29 - 2015-08-23 19:29 - 02864184 _____ (Blizzard Entertainment) C:\Users\foers\Downloads\Battle.net-Setup-enGB (1).exe
2015-08-23 19:29 - 2015-08-23 19:29 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-23 19:29 - 2015-08-23 19:29 - 00000000 ____D C:\Users\foers\.android
2015-08-23 19:28 - 2015-08-24 11:33 - 00000000 ____D C:\Users\foers\AppData\Roaming\Seznam.cz
2015-08-23 19:28 - 2015-08-23 21:30 - 00000000 ____D C:\qycache
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\Users\Public\QiYi
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\Users\foers\AppData\Roaming\ppslog
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\Users\foers\AppData\Local\Unity
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\Users\foers\AppData\Local\PeerDistRepub
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-08-23 19:28 - 2015-08-23 19:28 - 00000000 ____D C:\ppsfile
2015-08-23 19:26 - 2015-08-23 20:04 - 00000000 ____D C:\Program Files (x86)\baidu
2015-08-23 19:26 - 2015-08-23 19:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\baidu
2015-08-23 19:20 - 2015-08-24 12:06 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-23 19:20 - 2015-08-24 11:31 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-23 19:20 - 2015-08-24 11:28 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-23 19:20 - 2015-08-23 21:28 - 00000000 ____D C:\Users\foers\AppData\Local\Google
2015-08-23 19:20 - 2015-08-23 21:27 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-08-23 19:20 - 2015-08-23 19:31 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-23 19:20 - 2015-08-23 19:26 - 00004050 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-23 19:20 - 2015-08-23 19:26 - 00003818 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-23 19:20 - 2015-08-23 19:20 - 00004038 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-08-23 19:20 - 2015-08-23 19:20 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-23 19:20 - 2015-08-23 19:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-23 19:20 - 2015-08-23 19:20 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-23 19:19 - 2015-08-23 19:21 - 00000000 ____D C:\Users\foers\AppData\Local\Adobe
2015-08-23 19:00 - 2015-08-23 19:15 - 00000000 ____D C:\Users\foers\Downloads\MS Windows 10(x86) PRO UK-EN Untouched ISO+USB+ACTIVATION-TOOLS [danhuk]
2015-08-23 18:57 - 2015-08-23 18:57 - 00021464 _____ C:\Users\foers\Downloads\[kat.cr]windows.10.x86.pro.en.uk.untouched.iso.usb.keys.activation.tools.danhuk.torrent
2015-08-23 18:55 - 2015-08-23 18:55 - 00000691 _____ C:\Users\foers\Downloads\[kat.cr]product.keys.of.windows.10.home.pro.enterprise.torrent
2015-08-23 18:39 - 2015-08-23 18:39 - 02129208 _____ C:\Users\foers\Downloads\winrar-x64-521cz.exe
2015-08-23 18:39 - 2015-08-23 18:39 - 00000000 ____D C:\Users\foers\AppData\Roaming\WinRAR
2015-08-23 18:39 - 2015-08-23 18:39 - 00000000 ____D C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 18:39 - 2015-08-23 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 18:39 - 2015-08-23 18:39 - 00000000 ____D C:\Program Files\WinRAR
2015-08-23 18:25 - 2015-08-23 19:27 - 00000000 ____D C:\Users\foers\AppData\Roaming\uTorrent
2015-08-23 18:25 - 2015-08-23 18:25 - 00000995 _____ C:\Users\foers\Desktop\µTorrent.lnk
2015-08-23 18:25 - 2015-08-23 18:25 - 00000000 ____D C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2015-08-23 18:24 - 2015-08-23 18:25 - 02168712 _____ (emc) C:\Users\foers\Downloads\uTorrent221.exe
2015-08-23 17:25 - 2015-08-23 17:25 - 00001305 _____ C:\Users\Public\Desktop\World of Warcraft.lnk
2015-08-23 17:25 - 2015-08-23 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-08-23 17:23 - 2015-08-23 18:07 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2015-08-23 17:22 - 2015-08-23 20:04 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-23 17:22 - 2015-08-23 18:11 - 00000000 ____D C:\Users\foers\AppData\Local\Battle.net
2015-08-23 17:22 - 2015-08-23 17:23 - 00000000 ____D C:\Users\foers\AppData\Roaming\Battle.net
2015-08-23 17:22 - 2015-08-23 17:22 - 00001213 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-08-23 17:22 - 2015-08-23 17:22 - 00000000 ____D C:\Users\foers\AppData\Local\Blizzard Entertainment
2015-08-23 17:22 - 2015-08-23 17:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-08-23 17:22 - 2015-08-23 17:22 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-08-23 17:21 - 2015-08-23 17:21 - 02864184 _____ (Blizzard Entertainment) C:\Users\foers\Downloads\Battle.net-Setup-enGB.exe
2015-08-23 17:21 - 2015-08-23 17:21 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-23 17:18 - 2015-08-23 17:18 - 00000000 ____D C:\Users\foers\AppData\Roaming\Opera Software
2015-08-23 17:18 - 2015-08-23 17:18 - 00000000 ____D C:\Users\foers\AppData\Local\Opera Software
2015-08-23 17:17 - 2015-08-23 17:18 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-23 17:17 - 2015-08-23 17:17 - 00703472 _____ (Opera Software) C:\Users\foers\Downloads\Opera_NI_stable.exe
2015-08-23 17:17 - 2015-08-23 17:17 - 00003944 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1440343073
2015-08-23 17:17 - 2015-08-23 17:17 - 00001204 _____ C:\Users\Public\Desktop\Opera.lnk
2015-08-23 17:17 - 2015-08-23 17:17 - 00001204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-23 17:13 - 2015-08-23 17:13 - 00000000 ____D C:\Windows\LastGood.Tmp
2015-08-23 17:13 - 2015-08-23 16:25 - 00000000 ____D C:\Windows\Panther
2015-08-23 17:13 - 2000-01-01 02:00 - 35222128 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-08-23 17:13 - 2000-01-01 02:00 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 02918104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 02702552 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-08-23 17:13 - 2000-01-01 02:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 01749208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 01310936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00631000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00184688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2015-08-23 17:13 - 2000-01-01 02:00 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2015-08-23 17:12 - 2015-08-23 17:12 - 00000000 ____D C:\Program Files\Realtek
2015-08-23 17:12 - 2000-01-01 02:00 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-08-23 17:12 - 2000-01-01 02:00 - 02825944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2015-08-23 17:12 - 2000-01-01 02:00 - 00560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2015-08-23 17:12 - 2000-01-01 02:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-08-23 17:12 - 2000-01-01 02:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-08-23 17:12 - 2000-01-01 02:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2015-08-23 17:11 - 2000-01-01 02:00 - 04514008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-08-23 17:11 - 2000-01-01 02:00 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-08-23 17:11 - 2000-01-01 02:00 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2015-08-23 17:11 - 2000-01-01 02:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2015-08-23 17:09 - 2015-08-23 17:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-08-23 17:09 - 2015-08-23 17:09 - 00000000 ____D C:\Program Files\Synaptics
2015-08-23 17:08 - 2015-08-23 17:09 - 00007212 _____ C:\Windows\DPINST.LOG
2015-08-23 17:08 - 2015-08-23 17:09 - 00001368 _____ C:\Windows\Synaptics.log
2015-08-23 17:08 - 2000-01-01 02:00 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2015-08-23 17:08 - 2000-01-01 02:00 - 00033960 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2015-08-23 17:07 - 2015-08-23 17:13 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-08-23 17:04 - 2015-08-23 17:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-23 17:04 - 2015-08-23 17:07 - 00000000 ____D C:\Program Files (x86)\Realtek
2015-08-23 17:04 - 2000-01-01 02:00 - 00895256 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2015-08-23 17:04 - 2000-01-01 02:00 - 00091272 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2015-08-23 17:03 - 2015-08-23 17:03 - 00002134 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-08-23 16:58 - 2015-08-23 16:58 - 00001450 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-08-23 16:57 - 2015-08-23 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-23 16:57 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-08-23 16:57 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-08-23 16:57 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-08-23 16:57 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-08-23 16:57 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-08-23 16:56 - 2015-07-23 02:44 - 00572048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-08-23 16:54 - 2015-07-25 02:14 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-08-23 16:54 - 2015-07-25 02:14 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-08-23 16:54 - 2015-07-25 02:14 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 42730312 _____ C:\Windows\system32\nvcompiler.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 37749064 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 30518928 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 22973584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 18376584 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 16160440 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 16011680 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 15754192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 14511608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 13274904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 12973680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 11843384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 11142984 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-23 16:54 - 2015-07-23 06:02 - 03351864 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 02963208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 02360976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 02164040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435362.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435362.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 01165192 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 01061008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 01053000 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00991152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00983368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00976528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-08-23 16:54 - 2015-07-23 06:02 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-08-23 16:54 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-08-23 16:54 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-08-23 16:54 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-08-23 16:53 - 2015-08-23 16:53 - 00000000 ____D C:\NVIDIA
2015-08-23 16:42 - 2015-07-05 12:08 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-08-23 16:40 - 2015-08-24 11:28 - 00000442 _____ C:\Windows\Tasks\SlimDrivers Startup.job
2015-08-23 16:40 - 2015-08-23 16:40 - 00002922 _____ C:\Windows\System32\Tasks\SlimDrivers Startup
2015-08-23 16:40 - 2015-08-23 16:40 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc
2015-08-23 16:39 - 2015-08-23 16:41 - 00000000 ____D C:\Windows\system32\MRT
2015-08-23 16:39 - 2015-08-23 16:39 - 00002499 _____ C:\Users\Public\Desktop\SlimDrivers.lnk
2015-08-23 16:39 - 2015-08-23 16:39 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2015-08-23 16:39 - 2015-08-13 06:33 - 24593408 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-23 16:39 - 2015-08-11 11:23 - 16706560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-23 16:39 - 2015-08-11 11:22 - 21875200 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-08-23 16:39 - 2015-08-03 04:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2015-08-23 16:39 - 2015-08-03 04:13 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-23 16:39 - 2015-08-03 03:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-23 16:39 - 2015-08-03 03:50 - 20857848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-23 16:39 - 2015-08-03 03:18 - 12503552 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-23 16:39 - 2015-08-03 03:18 - 03780096 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2015-08-23 16:39 - 2015-08-03 03:01 - 11262464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-23 16:39 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-08-23 16:39 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-08-23 16:39 - 2015-07-28 10:59 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-23 16:39 - 2015-07-26 07:13 - 06488312 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2015-08-23 16:39 - 2015-07-26 06:28 - 05118024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2015-08-23 16:39 - 2015-07-22 05:54 - 14241792 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-08-23 16:39 - 2015-07-22 05:11 - 12589056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-08-23 16:39 - 2015-07-11 03:17 - 06305792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-08-23 16:39 - 2015-07-11 02:51 - 04398080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-08-23 16:38 - 2015-08-13 06:23 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-08-23 16:38 - 2015-08-13 06:22 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2015-08-23 16:38 - 2015-08-13 06:17 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-08-23 16:38 - 2015-08-13 06:07 - 19323392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-23 16:38 - 2015-08-11 12:04 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-08-23 16:38 - 2015-08-11 12:04 - 02462648 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-08-23 16:38 - 2015-08-11 12:03 - 08021840 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-23 16:38 - 2015-08-11 11:57 - 03622256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-23 16:38 - 2015-08-11 11:50 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-23 16:38 - 2015-08-11 11:40 - 04048808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-08-23 16:38 - 2015-08-11 11:40 - 02151208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-08-23 16:38 - 2015-08-11 11:31 - 02880032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-23 16:38 - 2015-08-11 11:20 - 02224640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2015-08-23 16:38 - 2015-08-11 11:16 - 02416640 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-08-23 16:38 - 2015-08-11 11:11 - 02446336 _____ C:\Windows\system32\InputService.dll
2015-08-23 16:38 - 2015-08-11 11:10 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-08-23 16:38 - 2015-08-11 11:06 - 07523328 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-08-23 16:38 - 2015-08-11 11:06 - 02662400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2015-08-23 16:38 - 2015-08-11 11:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-23 16:38 - 2015-08-11 11:05 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2015-08-23 16:38 - 2015-08-11 11:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-23 16:38 - 2015-08-11 11:02 - 01890304 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-23 16:38 - 2015-08-11 10:57 - 13024768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-08-23 16:38 - 2015-08-11 10:51 - 01916928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-08-23 16:38 - 2015-08-11 10:49 - 00586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-23 16:38 - 2015-08-11 10:45 - 18805760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-08-23 16:38 - 2015-08-11 10:45 - 01820672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2015-08-23 16:38 - 2015-08-11 10:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-23 16:38 - 2015-08-11 10:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-23 16:38 - 2015-08-08 08:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-23 16:38 - 2015-08-08 08:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-23 16:38 - 2015-08-08 08:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-23 16:38 - 2015-08-05 06:49 - 00783112 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2015-08-23 16:38 - 2015-08-05 06:29 - 00644128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2015-08-23 16:38 - 2015-08-05 05:54 - 01274880 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-08-23 16:38 - 2015-08-05 05:47 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-08-23 16:38 - 2015-08-04 06:06 - 00583128 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-08-23 16:38 - 2015-08-04 04:59 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2015-08-23 16:38 - 2015-08-04 04:47 - 00898560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2015-08-23 16:38 - 2015-08-03 04:18 - 01983840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-08-23 16:38 - 2015-08-03 04:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2015-08-23 16:38 - 2015-08-03 04:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2015-08-23 16:38 - 2015-08-03 03:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2015-08-23 16:38 - 2015-08-03 03:31 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2015-08-23 16:38 - 2015-08-03 03:24 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2015-08-23 16:38 - 2015-08-03 03:22 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2015-08-23 16:38 - 2015-08-03 03:22 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-08-23 16:38 - 2015-08-03 03:15 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2015-08-23 16:38 - 2015-08-03 03:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2015-08-23 16:38 - 2015-08-03 03:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2015-08-23 16:38 - 2015-08-03 03:15 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2015-08-23 16:38 - 2015-08-03 03:10 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2015-08-23 16:38 - 2015-08-03 03:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2015-08-23 16:38 - 2015-08-03 03:02 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2015-08-23 16:38 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2015-08-23 16:38 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2015-08-23 16:38 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-23 16:38 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2015-08-23 16:38 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2015-08-23 16:38 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2015-08-23 16:38 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-08-23 16:38 - 2015-07-30 08:05 - 02498808 _____ C:\Windows\system32\CoreUIComponents.dll
2015-08-23 16:38 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-08-23 16:38 - 2015-07-30 08:04 - 01396064 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-08-23 16:38 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-23 16:38 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-23 16:38 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2015-08-23 16:38 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-08-23 16:38 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2015-08-23 16:38 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2015-08-23 16:38 - 2015-07-30 06:24 - 01769056 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2015-08-23 16:38 - 2015-07-30 06:21 - 00962400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-08-23 16:38 - 2015-07-30 05:52 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2015-08-23 16:38 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2015-08-23 16:38 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-08-23 16:38 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2015-08-23 16:38 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2015-08-23 16:38 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2015-08-23 16:38 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-08-23 16:38 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2015-08-23 16:38 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-08-23 16:38 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2015-08-23 16:38 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2015-08-23 16:38 - 2015-07-26 07:16 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-08-23 16:38 - 2015-07-26 07:14 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-08-23 16:38 - 2015-07-26 07:14 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-08-23 16:38 - 2015-07-26 05:49 - 04760576 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-08-23 16:38 - 2015-07-26 05:40 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-08-23 16:38 - 2015-07-26 05:40 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-08-23 16:38 - 2015-07-26 05:39 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-08-23 16:38 - 2015-07-26 05:38 - 04350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-08-23 16:38 - 2015-07-26 05:30 - 00750592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-08-23 16:38 - 2015-07-24 05:30 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-08-23 16:38 - 2015-07-24 04:40 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-08-23 16:38 - 2015-07-24 04:39 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-08-23 16:38 - 2015-07-24 04:25 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-08-23 16:38 - 2015-07-24 04:24 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2015-08-23 16:38 - 2015-07-24 04:24 - 00925696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-08-23 16:38 - 2015-07-22 07:18 - 00808856 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2015-08-23 16:38 - 2015-07-22 07:02 - 00966424 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-08-23 16:38 - 2015-07-22 06:00 - 02235904 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-23 16:38 - 2015-07-22 06:00 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-23 16:38 - 2015-07-22 05:59 - 01773056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-08-23 16:38 - 2015-07-22 05:55 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-08-23 16:38 - 2015-07-22 05:53 - 00762896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2015-08-23 16:38 - 2015-07-22 05:46 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-08-23 16:38 - 2015-07-22 05:13 - 01611264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-08-23 16:38 - 2015-07-22 05:13 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-23 16:38 - 2015-07-22 05:03 - 00623616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-08-23 16:38 - 2015-07-19 06:04 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2015-08-23 16:38 - 2015-07-18 09:29 - 03443200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2015-08-23 16:38 - 2015-07-18 05:59 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2015-08-23 16:38 - 2015-07-18 05:52 - 04169728 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2015-08-23 16:38 - 2015-07-17 04:31 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-23 16:38 - 2015-07-17 04:26 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2015-08-23 16:38 - 2015-07-17 03:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2015-08-23 16:38 - 2015-07-16 06:04 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2015-08-23 16:38 - 2015-07-16 05:47 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2015-08-23 16:38 - 2015-07-16 05:44 - 02741760 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-23 16:38 - 2015-07-16 05:43 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-23 16:38 - 2015-07-16 05:35 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2015-08-23 16:38 - 2015-07-16 05:29 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-23 16:38 - 2015-07-16 05:27 - 02207744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-23 16:38 - 2015-07-15 05:21 - 01365072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-08-23 16:38 - 2015-07-15 04:49 - 01591856 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-08-23 16:38 - 2015-07-15 04:41 - 01135312 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2015-08-23 16:38 - 2015-07-15 04:22 - 02112512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-23 16:38 - 2015-07-15 03:47 - 04611584 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-23 16:38 - 2015-07-12 02:25 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\SensorDataService.exe
2015-08-23 16:38 - 2015-07-12 02:18 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2015-08-23 16:38 - 2015-07-12 01:46 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2015-08-23 16:38 - 2015-07-11 03:07 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2015-08-23 16:38 - 2015-07-11 03:04 - 03362816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-08-23 16:38 - 2015-07-11 03:03 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-08-23 16:38 - 2015-07-11 02:57 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2015-08-23 16:38 - 2015-07-11 02:43 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-08-23 16:38 - 2015-07-11 02:41 - 03687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-08-23 16:38 - 2015-07-11 02:40 - 02606080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-08-23 16:38 - 2015-07-10 17:51 - 00823336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-08-23 16:38 - 2015-07-10 17:00 - 01101792 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-08-23 16:38 - 2015-07-10 11:53 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2015-08-23 16:38 - 2015-07-10 11:31 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-08-23 16:37 - 2015-08-23 16:39 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\foers\Downloads\slimdrivers-setup.exe
2015-08-23 16:37 - 2015-08-23 16:37 - 00193336 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys
2015-08-23 16:37 - 2015-08-23 16:37 - 00000000 ____D C:\Users\foers\AppData\Roaming\Macromedia
2015-08-23 16:37 - 2015-08-13 06:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2015-08-23 16:37 - 2015-08-13 05:53 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2015-08-23 16:37 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-08-23 16:37 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-23 16:37 - 2015-08-11 12:02 - 00554744 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2015-08-23 16:37 - 2015-08-11 12:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2015-08-23 16:37 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2015-08-23 16:37 - 2015-08-11 11:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2015-08-23 16:37 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-08-23 16:37 - 2015-08-11 11:38 - 00454000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2015-08-23 16:37 - 2015-08-11 11:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2015-08-23 16:37 - 2015-08-11 11:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2015-08-23 16:37 - 2015-08-11 11:21 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2015-08-23 16:37 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2015-08-23 16:37 - 2015-08-11 11:20 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-08-23 16:37 - 2015-08-11 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2015-08-23 16:37 - 2015-08-11 11:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2015-08-23 16:37 - 2015-08-11 11:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll
2015-08-23 16:37 - 2015-08-11 11:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll
2015-08-23 16:37 - 2015-08-11 11:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2015-08-23 16:37 - 2015-08-11 11:10 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 16:37 - 2015-08-11 11:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll
2015-08-23 16:37 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2015-08-23 16:37 - 2015-08-11 11:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2015-08-23 16:37 - 2015-08-11 11:08 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2015-08-23 16:37 - 2015-08-11 11:07 - 01178112 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-08-23 16:37 - 2015-08-11 11:07 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2015-08-23 16:37 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2015-08-23 16:37 - 2015-08-11 11:05 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll
2015-08-23 16:37 - 2015-08-11 11:05 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2015-08-23 16:37 - 2015-08-11 11:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll
2015-08-23 16:37 - 2015-08-11 11:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2015-08-23 16:37 - 2015-08-11 11:02 - 03588096 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-08-23 16:37 - 2015-08-11 11:02 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2015-08-23 16:37 - 2015-08-11 11:02 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2015-08-23 16:37 - 2015-08-11 11:01 - 01334784 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-08-23 16:37 - 2015-08-11 11:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-23 16:37 - 2015-08-11 11:00 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll
2015-08-23 16:37 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-23 16:37 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2015-08-23 16:37 - 2015-08-11 10:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2015-08-23 16:37 - 2015-08-11 10:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll
2015-08-23 16:37 - 2015-08-11 10:58 - 00372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2015-08-23 16:37 - 2015-08-11 10:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2015-08-23 16:37 - 2015-08-11 10:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll
2015-08-23 16:37 - 2015-08-11 10:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2015-08-23 16:37 - 2015-08-11 10:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll
2015-08-23 16:37 - 2015-08-11 10:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2015-08-23 16:37 - 2015-08-11 10:49 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 16:37 - 2015-08-11 10:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2015-08-23 16:37 - 2015-08-11 10:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2015-08-23 16:37 - 2015-08-11 10:42 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-08-23 16:37 - 2015-08-11 10:40 - 01593856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-23 16:37 - 2015-08-11 10:40 - 01112064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-08-23 16:37 - 2015-08-11 10:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-23 16:37 - 2015-08-11 10:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2015-08-23 16:37 - 2015-08-08 09:29 - 01822280 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-23 16:37 - 2015-08-08 09:19 - 00608936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2015-08-23 16:37 - 2015-08-08 09:01 - 01533496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-23 16:37 - 2015-08-08 08:48 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2015-08-23 16:37 - 2015-08-08 08:40 - 00365056 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-23 16:37 - 2015-08-08 08:15 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-23 16:37 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2015-08-23 16:37 - 2015-08-06 05:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2015-08-23 16:37 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2015-08-23 16:37 - 2015-08-05 06:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-08-23 16:37 - 2015-08-05 05:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-08-23 16:37 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-23 16:37 - 2015-08-04 06:06 - 00243248 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-08-23 16:37 - 2015-08-04 05:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2015-08-23 16:37 - 2015-08-03 04:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2015-08-23 16:37 - 2015-08-03 04:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2015-08-23 16:37 - 2015-08-03 04:19 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2015-08-23 16:37 - 2015-08-03 04:19 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-08-23 16:37 - 2015-08-03 04:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys
2015-08-23 16:37 - 2015-08-03 04:17 - 00516960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-08-23 16:37 - 2015-08-03 04:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-08-23 16:37 - 2015-08-03 03:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll
2015-08-23 16:37 - 2015-08-03 03:24 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2015-08-23 16:37 - 2015-08-03 03:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll
2015-08-23 16:37 - 2015-08-03 03:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2015-08-23 16:37 - 2015-08-03 03:22 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2015-08-23 16:37 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll
2015-08-23 16:37 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-23 16:37 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-23 16:37 - 2015-08-03 03:18 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2015-08-23 16:37 - 2015-08-03 03:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll
2015-08-23 16:37 - 2015-08-03 03:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2015-08-23 16:37 - 2015-08-03 03:14 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-23 16:37 - 2015-08-03 03:14 - 00247808 _____ C:\Windows\system32\facecredentialprovider.dll
2015-08-23 16:37 - 2015-08-03 03:12 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2015-08-23 16:37 - 2015-08-03 03:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2015-08-23 16:37 - 2015-08-03 03:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2015-08-23 16:37 - 2015-08-03 03:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-23 16:37 - 2015-08-03 03:02 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-23 16:37 - 2015-08-03 02:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2015-08-23 16:37 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-08-23 16:37 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-08-23 16:37 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2015-08-23 16:37 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-08-23 16:37 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-08-23 16:37 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-08-23 16:37 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2015-08-23 16:37 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2015-08-23 16:37 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-08-23 16:37 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2015-08-23 16:37 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2015-08-23 16:37 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2015-08-23 16:37 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2015-08-23 16:37 - 2015-07-30 06:08 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2015-08-23 16:37 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2015-08-23 16:37 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2015-08-23 16:37 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2015-08-23 16:37 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2015-08-23 16:37 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-08-23 16:37 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2015-08-23 16:37 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2015-08-23 16:37 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-08-23 16:37 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2015-08-23 16:37 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2015-08-23 16:37 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-08-23 16:37 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll
2015-08-23 16:37 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2015-08-23 16:37 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-08-23 16:37 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2015-08-23 16:37 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2015-08-23 16:37 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2015-08-23 16:37 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2015-08-23 16:37 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll
2015-08-23 16:37 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2015-08-23 16:37 - 2015-07-26 07:16 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-08-23 16:37 - 2015-07-26 07:06 - 00607008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-08-23 16:37 - 2015-07-26 05:49 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-23 16:37 - 2015-07-26 05:47 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-08-23 16:37 - 2015-07-26 05:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2015-08-23 16:37 - 2015-07-26 05:35 - 00322048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-08-23 16:37 - 2015-07-26 05:34 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-23 16:37 - 2015-07-26 05:30 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-08-23 16:37 - 2015-07-26 05:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2015-08-23 16:37 - 2015-07-24 05:18 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-08-23 16:37 - 2015-07-24 05:17 - 00695136 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2015-08-23 16:37 - 2015-07-24 05:17 - 00521568 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2015-08-23 16:37 - 2015-07-24 05:12 - 00584544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2015-08-23 16:37 - 2015-07-24 04:55 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2015-08-23 16:37 - 2015-07-24 04:52 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2015-08-23 16:37 - 2015-07-24 04:46 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2015-08-23 16:37 - 2015-07-24 04:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2015-08-23 16:37 - 2015-07-24 04:34 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2015-08-23 16:37 - 2015-07-24 04:30 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-08-23 16:37 - 2015-07-24 04:29 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2015-08-23 16:37 - 2015-07-24 04:24 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2015-08-23 16:37 - 2015-07-24 04:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2015-08-23 16:37 - 2015-07-22 07:15 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2015-08-23 16:37 - 2015-07-22 06:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-08-23 16:37 - 2015-07-22 06:02 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2015-08-23 16:37 - 2015-07-22 06:00 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-08-23 16:37 - 2015-07-22 05:55 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-08-23 16:37 - 2015-07-22 05:21 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-08-23 16:37 - 2015-07-22 05:10 - 00828416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-08-23 16:37 - 2015-07-22 05:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2015-08-23 16:37 - 2015-07-22 05:07 - 00458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2015-08-23 16:37 - 2015-07-22 04:50 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2015-08-23 16:37 - 2015-07-19 05:54 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-23 16:37 - 2015-07-19 05:23 - 00505344 _____ C:\Windows\system32\EditionUpgradeManagerObj.dll
2015-08-23 16:37 - 2015-07-19 05:18 - 00430592 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2015-08-23 16:37 - 2015-07-19 05:02 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-08-23 16:37 - 2015-07-19 04:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-08-23 16:37 - 2015-07-18 10:47 - 00082616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2015-08-23 16:37 - 2015-07-18 09:43 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2015-08-23 16:37 - 2015-07-18 09:37 - 01043968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2015-08-23 16:37 - 2015-07-18 09:28 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2015-08-23 16:37 - 2015-07-18 09:28 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-23 16:37 - 2015-07-18 09:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2015-08-23 16:37 - 2015-07-18 07:17 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2015-08-23 16:37 - 2015-07-18 07:02 - 00290312 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2015-08-23 16:37 - 2015-07-18 06:06 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2015-08-23 16:37 - 2015-07-18 05:59 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2015-08-23 16:37 - 2015-07-18 05:50 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2015-08-23 16:37 - 2015-07-18 05:50 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-23 16:37 - 2015-07-18 05:49 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2015-08-23 16:37 - 2015-07-18 05:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2015-08-23 16:37 - 2015-07-18 05:49 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2015-08-23 16:37 - 2015-07-18 05:48 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2015-08-23 16:37 - 2015-07-18 05:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2015-08-23 16:37 - 2015-07-18 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-08-23 16:37 - 2015-07-17 06:23 - 00934752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2015-08-23 16:37 - 2015-07-17 06:13 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-08-23 16:37 - 2015-07-17 06:12 - 00630160 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-08-23 16:37 - 2015-07-17 06:07 - 00425824 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-08-23 16:37 - 2015-07-17 04:39 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2015-08-23 16:37 - 2015-07-17 04:39 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-23 16:37 - 2015-07-17 04:36 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2015-08-23 16:37 - 2015-07-17 04:33 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2015-08-23 16:37 - 2015-07-17 04:33 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\omadmprc.exe
2015-08-23 16:37 - 2015-07-17 04:32 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-08-23 16:37 - 2015-07-17 04:26 - 07051264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2015-08-23 16:37 - 2015-07-17 04:24 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2015-08-23 16:37 - 2015-07-17 04:19 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2015-08-23 16:37 - 2015-07-17 04:19 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2015-08-23 16:37 - 2015-07-17 04:18 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-23 16:37 - 2015-07-17 04:05 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2015-08-23 16:37 - 2015-07-17 04:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-23 16:37 - 2015-07-17 03:56 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2015-08-23 16:37 - 2015-07-17 03:51 - 05076480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2015-08-23 16:37 - 2015-07-17 03:50 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efscore.dll
2015-08-23 16:37 - 2015-07-17 03:44 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-23 16:37 - 2015-07-16 07:39 - 00061280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-08-23 16:37 - 2015-07-16 06:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2015-08-23 16:37 - 2015-07-16 06:03 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2015-08-23 16:37 - 2015-07-16 06:01 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-23 16:37 - 2015-07-16 05:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2015-08-23 16:37 - 2015-07-16 05:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2015-08-23 16:37 - 2015-07-16 05:41 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2015-08-23 16:37 - 2015-07-16 05:40 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2015-08-23 16:37 - 2015-07-16 05:36 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2015-08-23 16:37 - 2015-07-16 05:33 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\srumsvc.dll
2015-08-23 16:37 - 2015-07-16 05:32 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2015-08-23 16:37 - 2015-07-16 05:19 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srumsvc.dll
2015-08-23 16:37 - 2015-07-15 04:49 - 00325984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-08-23 16:37 - 2015-07-15 04:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2015-08-23 16:37 - 2015-07-15 04:04 - 00032768 _____ C:\Windows\system32\LicenseManagerApi.dll
2015-08-23 16:37 - 2015-07-15 03:57 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\OmaDmAgent.dll
2015-08-23 16:37 - 2015-07-15 03:41 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2015-08-23 16:37 - 2015-07-15 03:37 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.ProxyStub.dll
2015-08-23 16:37 - 2015-07-15 03:35 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\unenrollhook.dll
2015-08-23 16:37 - 2015-07-15 03:27 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-23 16:37 - 2015-07-14 05:00 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-08-23 16:37 - 2015-07-14 04:37 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-08-23 16:37 - 2015-07-14 04:04 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys
2015-08-23 16:37 - 2015-07-14 03:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2015-08-23 16:37 - 2015-07-14 03:49 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2015-08-23 16:37 - 2015-07-14 03:38 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2015-08-23 16:37 - 2015-07-14 03:20 - 00279552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-08-23 16:37 - 2015-07-13 02:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2015-08-23 16:37 - 2015-07-13 01:30 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2015-08-23 16:37 - 2015-07-12 02:38 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2015-08-23 16:37 - 2015-07-11 03:28 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2015-08-23 16:37 - 2015-07-11 03:05 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2015-08-23 16:37 - 2015-07-11 03:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-08-23 16:37 - 2015-07-11 03:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2015-08-23 16:37 - 2015-07-11 03:01 - 04791296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-23 16:37 - 2015-07-11 02:42 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2015-08-23 16:37 - 2015-07-11 02:40 - 03579904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-23 16:37 - 2015-07-11 02:40 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-08-23 16:37 - 2015-07-11 02:34 - 00294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2015-08-23 16:37 - 2015-07-10 17:47 - 00265480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-23 16:37 - 2015-07-10 16:52 - 00335248 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-23 16:37 - 2015-07-10 12:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2015-08-23 16:37 - 2015-07-10 12:42 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2015-08-23 16:37 - 2015-07-10 12:10 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2015-08-23 16:37 - 2015-07-10 12:05 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2015-08-23 16:37 - 2015-07-10 11:35 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2015-08-23 16:37 - 2015-07-10 11:29 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2015-08-23 16:36 - 2015-08-23 16:36 - 00000000 ____D C:\Users\foers\AppData\Local\MicrosoftEdge
2015-08-23 16:32 - 2015-08-23 16:32 - 00002358 _____ C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-23 16:32 - 2015-08-23 16:32 - 00000000 ___RD C:\Users\foers\OneDrive
2015-08-23 16:31 - 2015-08-23 16:33 - 00000000 ____D C:\Users\foers\AppData\Local\Comms
2015-08-23 16:31 - 2015-08-23 16:31 - 00000000 ____D C:\Users\foers\AppData\Local\NVIDIA
2015-08-23 16:31 - 2015-08-23 16:31 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-08-23 16:30 - 2015-08-24 11:27 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-23 16:30 - 2015-08-23 16:30 - 00000000 ____D C:\Users\foers\AppData\Local\Publishers
2015-08-23 16:29 - 2015-08-23 20:01 - 00000000 ____D C:\Users\foers\AppData\Local\VirtualStore
2015-08-23 16:29 - 2015-08-23 16:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-23 16:29 - 2015-08-23 16:57 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-23 16:29 - 2015-08-23 16:57 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-23 16:29 - 2015-08-23 16:47 - 00000000 ____D C:\Users\foers\AppData\Local\Packages
2015-08-23 16:29 - 2015-08-23 16:29 - 00016148 _____ C:\Windows\system32\DESKTOP-C9LD40V_defaultuser0_HistoryPrediction.bin
2015-08-23 16:29 - 2015-08-23 16:29 - 00000000 ____D C:\Users\foers\AppData\Roaming\Adobe
2015-08-23 16:29 - 2015-08-23 16:29 - 00000000 ____D C:\Users\foers\AppData\Local\TileDataLayer
2015-08-23 16:29 - 2015-07-23 06:02 - 00112784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-23 16:29 - 2015-07-23 06:02 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-08-23 16:29 - 2015-07-23 03:10 - 06873928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-23 16:29 - 2015-07-23 03:10 - 03493008 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-08-23 16:29 - 2015-07-23 03:10 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-08-23 16:29 - 2015-07-23 03:10 - 00937800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-23 16:29 - 2015-07-23 03:10 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-23 16:29 - 2015-07-23 03:10 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-23 16:29 - 2015-07-22 06:29 - 05121613 _____ C:\Windows\system32\nvcoproc.bin
2015-08-23 16:28 - 2015-08-23 22:12 - 00000000 ____D C:\Users\foers
2015-08-23 16:28 - 2015-08-23 16:29 - 00000000 ___RD C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 16:28 - 2015-08-23 16:28 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435354.dll
2015-08-23 16:28 - 2015-08-23 16:28 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435354.dll
2015-08-23 16:28 - 2015-08-23 16:28 - 00000020 ___SH C:\Users\foers\ntuser.ini
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Šablony
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Soubory cookie
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Poslední
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Okolní tiskárny
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Okolní síť
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Nabídka Start
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Dokumenty
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Documents\Obrázky
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Documents\Hudba
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Documents\Filmy
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\Data aplikací
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-23 16:28 - 2015-08-23 16:28 - 00000000 _SHDL C:\Users\foers\AppData\Local\Data aplikací
2015-08-23 16:28 - 2015-07-23 06:02 - 00031976 _____ C:\Windows\system32\nvinfo.pb
2015-08-23 16:28 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-23 16:28 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 16:28 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-23 16:28 - 2015-07-10 13:04 - 00000000 ____D C:\Users\foers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-23 16:27 - 2015-08-23 17:13 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-08-23 16:23 - 2015-08-24 11:33 - 01674756 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-23 16:19 - 2015-08-23 16:19 - 00000000 ____D C:\Windows\CSC
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Šablony
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Poslední
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Okolní síť
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Dokumenty
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\Data aplikací
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Šablony
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Plocha
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Dokumenty
2015-08-23 16:18 - 2015-08-23 16:18 - 00000000 _SHDL C:\ProgramData\Data aplikací
2015-08-23 16:17 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2015-08-23 16:16 - 2015-08-23 16:16 - 00000000 __SHD C:\Recovery
2015-08-23 16:14 - 2015-08-24 11:27 - 00242006 _____ C:\Windows\PFRO.log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-24 12:28 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\sru
2015-08-24 12:12 - 2015-07-10 14:22 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-08-24 11:33 - 2015-07-10 18:02 - 00710988 _____ C:\Windows\system32\perfh005.dat
2015-08-24 11:33 - 2015-07-10 18:02 - 00141564 _____ C:\Windows\system32\perfc005.dat
2015-08-24 11:27 - 2015-07-10 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-24 11:26 - 2015-07-10 11:05 - 00131072 ___SH C:\Windows\system32\config\BBI
2015-08-23 23:24 - 2015-07-10 14:20 - 00009184 _____ C:\Windows\setupact.log
2015-08-23 21:27 - 2015-07-10 14:20 - 00198728 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-23 17:47 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\AppReadiness
2015-08-23 17:13 - 2015-07-10 13:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\oobe
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-23 16:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Provisioning
2015-08-23 16:58 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-23 16:58 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Dism
2015-08-23 16:42 - 2015-07-10 12:55 - 00000000 ____D C:\Windows\CbsTemp
2015-08-23 16:30 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PrintDialog
2015-08-23 16:30 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\MiracastView
2015-08-23 16:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Help
2015-08-23 16:27 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\rescache
2015-08-23 16:22 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\restore
2015-08-23 16:21 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\spool
2015-08-23 16:19 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-08-23 16:18 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT
2015-08-23 16:18 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default
2015-08-23 16:16 - 2015-07-10 13:05 - 00002133 _____ C:\Windows\DtcInstall.log
2015-08-23 16:16 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\Recovery
2015-08-23 16:16 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Sysprep
2015-08-08 17:38 - 2015-07-10 13:06 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 17:38 - 2015-07-10 13:06 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======


Some files in TEMP:
====================
C:\Users\foers\AppData\Local\Temp\install1215124.exe
C:\Users\foers\AppData\Local\Temp\InstHelper.exe
C:\Users\foers\AppData\Local\Temp\IQIYIsetup_l_huayukeji@kb006.exe
C:\Users\foers\AppData\Local\Temp\masauto_runxx.dl.dll
C:\Users\foers\AppData\Local\Temp\masblog_runxx.dl.dll
C:\Users\foers\AppData\Local\Temp\masflag_runxx.dl.dll
C:\Users\foers\AppData\Local\Temp\nvStInst.exe
C:\Users\foers\AppData\Local\Temp\ppstreamsetup_unfix.exe
C:\Users\foers\AppData\Local\Temp\qqpcmgr_v10.11.16588.235_72603_Silence.exe
C:\Users\foers\AppData\Local\Temp\QYAgent_runxx.dl.dll
C:\Users\foers\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-23 16:14




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:232.35 GB) (Free:181.96 GB) NTFS

Available physical RAM: 2304.25 MB
Total physical RAM: 4079.11 MB
Percentage of memory in use: 43%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: EC4ACEA1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\OlSwG34SwwrhGas85AK.job => C:\Users\foers\AppData\Roaming\OlSwG34SwwrhGas85AK.exe <==== ATTENTION
Task: C:\Windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\foers\Desktop" je 4 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim,

je Vas operacni system legalni?