VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Honza at 2015-08-24 17:02:02
Microsoft Windows 10 Home
System drive C: has 604 GB (67%) free of 904 GB
Total RAM: 3962 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:02:10, on 24. 8. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Jan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SecureWebBHO - {D3C24E2B-C820-4492-9B69-11BF7163F998} - C:\Program Files (x86)\AFC Secure Net\swie.dll
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Remote Mouse] C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: @oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Games\Origin\OriginClientService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Privoxy (PrivoxyService) (PrivoxyService) - The Privoxy team - www.privoxy.org - C:\Program Files (x86)\AFC Secure Net\privoxy.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10613 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3e5b6d77-edf5-4d3a-9d9a-fea8c4566c86 -SystemEventPortName:HostProcess-a08aff94-9147-4345-ae1f-e8c66bbc989e -IoCancelEventPortName:HostProcess-fd45a57f-a091-4104-9095-ed68a21a6bbb -NonStateChangingEventPortName:HostProcess-1651c77e-0222-4876-adb8-a81d910a7a84 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c790bf20-4694-4ceb-8de3-576a7da0dcee -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\AFC Secure Net\privoxy.exe" --service
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"

"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
dashost.exe {2ac76208-9476-42d6-ae04479d25599703}
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" acad6491-d250-4e65-944b-9edeafb64569
\??\C:\WINDOWS\system32\conhost.exe 0x4

taskeng.exe {DCC529E4-EC34-4E09-AC23-F46CF678783E}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\WINDOWS\Explorer.EXE

"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
adb fork-server server
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 6DC1C9DA-E40C-5190-3044-32F371A3E1D4 -Reinvoke
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Users\Jan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
taskhostw.exe
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3004.0.1019589425\72182052" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,22,45 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4252 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.1.735453962\1590612646" --font-cache-shared-handle=2024 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.2.985750927\1096538889" --font-cache-shared-handle=2300 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.3.468083984\1768619237" --font-cache-shared-handle=2448 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.4.1517637230\1803252714" --font-cache-shared-handle=2436 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.5.1957129640\1824929039" --font-cache-shared-handle=2448 /prefetch:673131151
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="3004.9.455759323\1664776343" --font-cache-shared-handle=6388 /prefetch:673131151
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16445_none_1161304761f67502\TiWorker.exe -Embedding
"C:\Users\Jan\Downloads\RSITx64.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3C24E2B-C820-4492-9B69-11BF7163F998}]
SecureWebBHO Class - C:\Program Files (x86)\AFC Secure Net\swie.dll [2015-08-24 135168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-08-13 3233976]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-07-11 384912]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2014-11-07 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2014-11-07 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-07-24 1710568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-07-17 8418584]
"GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-08-18 863560]
"Remote Mouse"=C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]
"OneDrive"=C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-20 404064]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2015-06-12 561672]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-24 17:02:02 ----D---- C:\Program Files\trend micro
2015-08-24 16:53:25 ----D---- C:\rsit
2015-08-24 15:24:06 ----D---- C:\Users\Jan\AppData\Roaming\NVIDIA
2015-08-24 15:23:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-24 15:22:32 ----D---- C:\Users\Jan\AppData\Roaming\System Checker
2015-08-24 15:22:22 ----D---- C:\Program Files (x86)\AFC Secure Net
2015-08-24 15:22:07 ----D---- C:\Users\Jan\AppData\Roaming\Opera Software
2015-08-24 15:19:55 ----D---- C:\Program Files (x86)\Opera
2015-08-19 18:01:35 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-19 18:01:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 18:01:32 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 18:01:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-08-19 18:01:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 18:01:27 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-08-19 18:01:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 18:01:09 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-17 13:28:30 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-08-17 13:28:30 ----D---- C:\WINDOWS\system32\NV
2015-08-16 19:48:18 ----D---- C:\ProgramData\NVIDIA
2015-08-16 19:43:18 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-16 19:43:15 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-08-16 19:43:13 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-16 19:43:09 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-08-16 19:40:30 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-08-16 19:40:28 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\system32\nvapi64.dll
2015-08-14 13:29:02 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-13 16:03:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:03:22 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:02:37 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-13 16:02:32 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-13 16:02:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-08-13 16:02:28 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-13 16:02:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-13 16:02:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-08-13 16:02:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-13 16:02:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-13 16:01:59 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-13 16:01:56 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-13 16:01:54 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-08-13 16:01:50 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-13 16:01:43 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-13 16:01:40 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-13 16:01:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-13 16:01:37 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-13 16:01:36 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-08-13 16:01:35 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-13 16:01:33 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-13 16:01:31 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-13 16:00:29 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-13 16:00:02 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-13 15:59:49 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-13 15:59:48 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-08-13 15:59:47 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\mf.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-13 15:59:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-13 15:59:37 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-13 15:59:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:30 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-13 15:59:29 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-08-13 15:59:27 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:25 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-08-13 15:59:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-13 15:59:19 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-13 15:59:18 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-13 15:59:14 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-13 15:59:09 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-13 15:58:57 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-13 15:58:44 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-08-13 15:58:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-13 15:58:37 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-08-13 15:58:35 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-13 15:58:32 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-13 15:58:27 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-13 15:58:26 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-13 15:58:25 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-13 15:58:24 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-08-13 15:58:19 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-08-13 15:58:18 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-13 15:58:01 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-08-13 15:57:03 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-13 15:56:52 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-08-13 15:56:50 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-13 15:56:49 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-13 15:56:47 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-13 15:56:42 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-13 15:56:36 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-13 15:56:35 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-13 15:56:34 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-13 15:56:34 ----A---- C:\WINDOWS\notepad.exe
2015-08-13 15:56:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-13 15:56:26 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-08-13 15:56:18 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-08-13 15:56:11 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-13 15:56:10 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-08-13 15:56:09 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-08-13 15:56:06 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-13 15:55:59 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-08-13 15:55:30 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-13 15:55:22 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-13 15:55:20 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-13 15:54:52 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-08-13 15:54:51 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-13 15:54:31 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-13 15:54:13 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-13 15:54:12 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\mfps.dll
2015-08-13 15:54:09 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-13 15:52:10 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-13 15:52:04 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-13 15:51:52 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-13 15:51:50 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-13 13:46:04 ----SHD---- C:\Recovery
2015-08-13 13:45:56 ----DC---- C:\WINDOWS\Panther
2015-08-13 13:42:37 ----D---- C:\Windows.old
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\bcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winresume.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winload.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wer.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\usocore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hal.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\efscore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-08-13 13:26:38 ----D---- C:\Program Files\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files\MSBuild
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\MSBuild
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:47 ----A---- C:\WINDOWS\system32\ETDCoInstaller01000.dll
2015-08-13 13:25:36 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-13 13:12:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-13 13:06:56 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-08-13 12:56:26 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2015-08-13 12:53:09 ----D---- C:\Program Files (x86)\USB Camera
2015-08-13 12:53:01 ----D---- C:\Program Files\CONEXANT
2015-08-13 12:52:36 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-13 12:52:22 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-08-13 12:52:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-13 12:52:04 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-08-13 12:52:04 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-08-13 12:51:56 ----D---- C:\Program Files\Intel
2015-08-13 12:51:25 ----D---- C:\Program Files\Elantech
2015-08-13 12:49:54 ----D---- C:\WINDOWS\Prefetch
2015-08-10 11:12:10 ----D---- C:\Users\Jan\AppData\Roaming\LolClient
2015-08-10 04:11:32 ----D---- C:\ProgramData\Riot Games
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-08-10 04:09:27 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-08-10 04:07:25 ----D---- C:\Users\Jan\AppData\Roaming\Riot Games

======List of files/folders modified in the last 1 month======

2015-08-24 17:02:02 ----RD---- C:\Program Files
2015-08-24 17:01:08 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-08-24 16:59:18 ----D---- C:\WINDOWS\Temp
2015-08-24 16:59:18 ----D---- C:\WINDOWS\System32
2015-08-24 16:58:30 ----D---- C:\Windows
2015-08-24 16:57:54 ----D---- C:\WINDOWS\system32\sru
2015-08-24 16:57:42 ----RD---- C:\Program Files (x86)
2015-08-24 16:57:32 ----D---- C:\WINDOWS\Tasks
2015-08-24 16:57:32 ----D---- C:\WINDOWS\system32\Tasks
2015-08-24 15:23:25 ----SHD---- C:\WINDOWS\Installer
2015-08-24 15:23:25 ----SD---- C:\ProgramData\Microsoft
2015-08-24 11:31:49 ----D---- C:\WINDOWS\Microsoft.NET
2015-08-23 18:58:21 ----D---- C:\Program Files (x86)\Rockstar Games
2015-08-23 18:58:03 ----D---- C:\Program Files\Rockstar Games
2015-08-23 11:27:57 ----D---- C:\WINDOWS\AppReadiness
2015-08-23 11:27:56 ----HD---- C:\Program Files\WindowsApps
2015-08-22 17:45:24 ----D---- C:\WINDOWS\rescache
2015-08-21 15:30:04 ----D---- C:\WINDOWS\system32\config
2015-08-21 15:27:08 ----D---- C:\WINDOWS\INF
2015-08-21 15:19:35 ----D---- C:\WINDOWS\WinSxS
2015-08-21 15:15:48 ----D---- C:\WINDOWS\SysWOW64
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\appraiser
2015-08-21 15:15:47 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-21 15:15:47 ----D---- C:\WINDOWS\system32\drivers
2015-08-21 15:15:47 ----D---- C:\WINDOWS\AppPatch
2015-08-21 15:15:46 ----D---- C:\WINDOWS\system32\DriverStore
2015-08-21 15:15:44 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-20 17:42:16 ----SHD---- C:\System Volume Information
2015-08-20 13:18:37 ----D---- C:\WINDOWS\CbsTemp
2015-08-20 11:45:23 ----D---- C:\WINDOWS\debug
2015-08-19 17:42:36 ----D---- C:\WINDOWS\ModemLogs
2015-08-19 17:40:22 ----D---- C:\Program Files\CCleaner
2015-08-19 17:25:24 ----D---- C:\WINDOWS\system32\catroot2
2015-08-17 13:29:49 ----D---- C:\WINDOWS\system32\WDI
2015-08-16 22:32:39 ----D---- C:\WINDOWS\Logs
2015-08-16 19:48:18 ----HD---- C:\ProgramData
2015-08-16 19:43:09 ----D---- C:\WINDOWS\Help
2015-08-16 13:53:10 ----D---- C:\ProgramData\Origin
2015-08-15 17:03:11 ----SHD---- C:\$Recycle.Bin
2015-08-15 17:01:10 ----RD---- C:\Users
2015-08-15 11:43:20 ----RD---- C:\WINDOWS\assembly
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\oobe
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-14 09:07:59 ----D---- C:\WINDOWS\Provisioning
2015-08-14 09:07:58 ----D---- C:\Program Files\Internet Explorer
2015-08-14 09:07:58 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-14 08:52:24 ----D---- C:\WINDOWS\appcompat
2015-08-13 16:04:18 ----D---- C:\WINDOWS\system32\restore
2015-08-13 15:41:15 ----D---- C:\WINDOWS\OCR
2015-08-13 13:59:00 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-08-13 13:54:01 ----D---- C:\WINDOWS\SYSWOW64\sda
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\oobe
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Boot
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\system32\F12
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\en
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\migwiz
2015-08-13 13:36:35 ----SD---- C:\WINDOWS\system32\DiagSvcs
2015-08-13 13:36:35 ----D---- C:\WINDOWS\system32\en
2015-08-13 13:36:35 ----D---- C:\WINDOWS\servicing
2015-08-13 13:36:35 ----D---- C:\WINDOWS\en-US
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Journal
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Defender
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Defender
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-08-13 13:26:40 ----D---- C:\WINDOWS\system32\MUI
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpwsockx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpmodemx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dplaysvr.exe
2015-08-13 13:26:33 ----A---- C:\WINDOWS\SYSWOW64\dplayx.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnet.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2015-08-13 13:23:04 ----RD---- C:\WINDOWS\PurchaseDialog
2015-08-13 13:23:03 ----RD---- C:\WINDOWS\PrintDialog
2015-08-13 13:23:01 ----RD---- C:\WINDOWS\MiracastView
2015-08-13 13:22:29 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-08-13 13:21:52 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-08-13 13:18:28 ----D---- C:\Program Files\Windows NT
2015-08-13 13:17:58 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-13 13:16:13 ----D---- C:\WINDOWS\Registration
2015-08-13 13:12:34 ----D---- C:\WINDOWS\system32\LogFiles
2015-08-13 13:12:18 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-13 13:08:46 ----D---- C:\WINDOWS\system32\wbem
2015-08-13 13:03:09 ----D---- C:\WINDOWS\system32\CatRoot
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2015-08-13 13:00:13 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-TW
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-HK
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-CN
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\uk-UA
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\tr-TR
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\th-TH
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sv-SE
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\spool
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sl-SI
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sk-SK
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ru-RU
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ro-RO
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-PT
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-BR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\pl-PL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nl-NL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\NDF
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nb-NO
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\migration
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lv-LV
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lt-LT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ko-KR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ja-JP
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\it-IT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\InputMethod
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\IME
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hu-HU
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hr-HR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\he-IL
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fr-FR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fi-FI
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\et-EE
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\es-ES
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\en-GB
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\el-GR
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\de-DE
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\da-DK
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\bg-BG
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\ar-SA
2015-08-13 12:58:32 ----D---- C:\WINDOWS\MediaViewer
2015-08-13 12:58:30 ----D---- C:\WINDOWS\InputMethod
2015-08-13 12:58:25 ----RSD---- C:\WINDOWS\Fonts
2015-08-13 12:58:24 ----D---- C:\WINDOWS\ADFS
2015-08-13 12:58:21 ----D---- C:\ProgramData\PRICache
2015-08-13 12:58:15 ----D---- C:\Program Files (x86)\Windows Mail
2015-08-13 12:58:13 ----D---- C:\Program Files (x86)\Common Files
2015-08-13 12:58:10 ----D---- C:\Program Files\Windows Mail
2015-08-13 12:58:07 ----D---- C:\Program Files\Lenovo
2015-08-13 12:58:04 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-13 12:58:03 ----D---- C:\Program Files\Common Files
2015-08-13 12:57:48 ----D---- C:\WINDOWS\system32\Recovery
2015-08-13 12:57:21 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-13 12:55:13 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-13 12:53:09 ----D---- C:\WINDOWS\twain_32
2015-08-13 12:53:09 ----D---- C:\WINDOWS\System
2015-08-13 12:13:42 ----HD---- C:\$Windows.~BT
2015-08-12 21:50:42 ----D---- C:\WINDOWS\system32\MRT
2015-08-12 21:50:37 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-10 22:22:11 ----D---- C:\Users\Jan\AppData\Roaming\Skype
2015-08-10 11:06:48 ----D---- C:\ProgramData\Skype
2015-08-10 11:06:44 ----RD---- C:\Program Files (x86)\Skype
2015-08-10 04:09:12 ----D---- C:\Games
2015-08-08 17:38:46 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2014-11-07 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-08-11 41592]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 ACPIVPC;@oem26.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-11-07 33560]
R3 bcbtums;@oem40.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2015-07-10 7593176]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 ETD;@oem46.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-08-13 428216]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-11 3789240]
R3 IntcDAud;@oem30.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem19.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-06-26 39480]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-07-10 129224]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-11 11174544]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem32.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-04-03 38032]
R3 RTSUER;@oem35.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-07-10 928768]
S3 btwampfl;@oem40.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 HtcVCom32;@oem6.inf,%OEMSerialPortName00%;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [2010-03-09 121800]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 massfilter;Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 11776]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-13 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem13.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-13 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2015-07-10 131584]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2011-03-08 122608]
R2 BcmBtRSupport;@oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-08-13 135352]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-06-27 87368]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-11 319888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-21 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-07 937776]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 PrivoxyService;Privoxy (PrivoxyService); C:\Program Files (x86)\AFC Secure Net\privoxy.exe [2015-08-24 371200]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 365376]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-11 281488]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 Origin Client Service;Origin Client Service; C:\Games\Origin\OriginClientService.exe [2015-04-01 1931632]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-13 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v5.003 - Logfile created 24/08/2015 at 18:07:26
# Updated 20/08/2015 by Xplode
# Database : 2015-08-23.3 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Honza - IDEA-PC
# Running from : C:\Users\Jan\Desktop\adwcleaner_5.003.exe
# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : PrivoxyService

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Amazon\ABB
[-] Folder Deleted : C:\Program Files (x86)\AFC Secure Net

***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2F137995-4D26-44AD-9C4E-91055090A817}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3C24E2B-C820-4492-9B69-11BF7163F998}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3C24E2B-C820-4492-9B69-11BF7163F998}
[-] Key Deleted : HKLM\SOFTWARE\SecureWebChannel
[-] Key Deleted : HKLM\SOFTWARE\SecureWeb
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A428B273-73B2-E11F-895C-669BA9344EE5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\C3F6D7A0BA2FDE84EB329997B1FF786D
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\C3F6D7A0BA2FDE84EB329997B1FF786D
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C3F6D7A0BA2FDE84EB329997B1FF786D

***** [ Web browsers ] *****

[-] [C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted :
[-] [C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted :
[-] [C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted :

*************************

:: Proxy settings cleared
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2202 bytes] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Honza at 2015-08-24 20:18:23
Microsoft Windows 10 Home
System drive C: has 603 GB (67%) free of 904 GB
Total RAM: 3962 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:18:26, on 24. 8. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Remote Mouse] C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: @oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Games\Origin\OriginClientService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10166 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4a242a7e-c572-448a-a5b2-8687584f0bbb -SystemEventPortName:HostProcess-2df46021-63c8-41e8-b088-0a3f66af8d4a -IoCancelEventPortName:HostProcess-1f03df36-1138-468e-a31d-c0eac130d182 -NonStateChangingEventPortName:HostProcess-782b532d-97b3-45e5-bd9a-ecf5ac8c8867 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:45a071e2-fc76-47cb-9402-18929fbb4569 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel

"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {6df8237c-72d5-435a-a760d9b9ee58f9b1}
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" acad6491-d250-4e65-944b-9edeafb64569
\??\C:\WINDOWS\system32\conhost.exe 0x4

sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
adb fork-server server
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:2372 CREDAT:140545 EDGEHOST /prefetch:6
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:2372 CREDAT:206082 EDGEHOST /prefetch:6
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:2372 CREDAT:206108 EDGEHOST /prefetch:6

taskhostw.exe
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1507.15010.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.12391.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3775995483-125773328-2494192704-100214_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3775995483-125773328-2494192704-100214 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 612 624 632 8192 628
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jan\Desktop\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-08-13 3233976]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-07-11 384912]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2014-11-07 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2014-11-07 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-07-24 1710568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-07-17 8418584]
"GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-08-18 863560]
"Remote Mouse"=C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]
"OneDrive"=C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-20 404064]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2015-06-12 561672]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-24 20:18:24 ----D---- C:\Program Files\trend micro
2015-08-24 18:06:28 ----D---- C:\AdwCleaner
2015-08-24 16:53:25 ----D---- C:\rsit
2015-08-24 15:24:06 ----D---- C:\Users\Jan\AppData\Roaming\NVIDIA
2015-08-24 15:23:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-24 15:22:32 ----D---- C:\Users\Jan\AppData\Roaming\System Checker
2015-08-24 15:22:07 ----D---- C:\Users\Jan\AppData\Roaming\Opera Software
2015-08-24 15:19:55 ----D---- C:\Program Files (x86)\Opera
2015-08-19 18:01:35 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-19 18:01:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 18:01:32 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 18:01:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-08-19 18:01:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 18:01:27 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-08-19 18:01:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 18:01:09 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-17 13:28:30 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-08-17 13:28:30 ----D---- C:\WINDOWS\system32\NV
2015-08-16 19:48:18 ----D---- C:\ProgramData\NVIDIA
2015-08-16 19:43:18 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-16 19:43:15 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-08-16 19:43:13 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-16 19:43:09 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-08-16 19:40:30 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-08-16 19:40:28 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\system32\nvapi64.dll
2015-08-14 13:29:02 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-13 16:03:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:03:22 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:02:37 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-13 16:02:32 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-13 16:02:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-08-13 16:02:28 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-13 16:02:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-13 16:02:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-08-13 16:02:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-13 16:02:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-13 16:01:59 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-13 16:01:56 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-13 16:01:54 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-08-13 16:01:50 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-13 16:01:43 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-13 16:01:40 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-13 16:01:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-13 16:01:37 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-13 16:01:36 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-08-13 16:01:35 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-13 16:01:33 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-13 16:01:31 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-13 16:00:29 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-13 16:00:02 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-13 15:59:49 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-13 15:59:48 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-08-13 15:59:47 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\mf.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-13 15:59:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-13 15:59:37 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-13 15:59:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:30 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-13 15:59:29 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-08-13 15:59:27 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:25 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-08-13 15:59:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-13 15:59:19 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-13 15:59:18 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-13 15:59:14 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-13 15:59:09 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-13 15:58:57 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-13 15:58:44 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-08-13 15:58:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-13 15:58:37 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-08-13 15:58:35 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-13 15:58:32 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-13 15:58:27 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-13 15:58:26 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-13 15:58:25 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-13 15:58:24 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-08-13 15:58:19 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-08-13 15:58:18 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-13 15:58:01 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-08-13 15:57:03 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-13 15:56:52 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-08-13 15:56:50 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-13 15:56:49 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-13 15:56:47 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-13 15:56:42 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-13 15:56:36 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-13 15:56:35 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-13 15:56:34 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-13 15:56:34 ----A---- C:\WINDOWS\notepad.exe
2015-08-13 15:56:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-13 15:56:26 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-08-13 15:56:18 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-08-13 15:56:11 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-13 15:56:10 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-08-13 15:56:09 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-08-13 15:56:06 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-13 15:55:59 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-08-13 15:55:30 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-13 15:55:22 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-13 15:55:20 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-13 15:54:52 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-08-13 15:54:51 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-13 15:54:31 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-13 15:54:13 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-13 15:54:12 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\mfps.dll
2015-08-13 15:54:09 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-13 15:52:10 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-13 15:52:04 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-13 15:51:52 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-13 15:51:50 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-13 13:46:04 ----SHD---- C:\Recovery
2015-08-13 13:45:56 ----DC---- C:\WINDOWS\Panther
2015-08-13 13:42:37 ----D---- C:\Windows.old
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\bcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winresume.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winload.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wer.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\usocore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hal.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\efscore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-08-13 13:26:38 ----D---- C:\Program Files\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files\MSBuild
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\MSBuild
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:47 ----A---- C:\WINDOWS\system32\ETDCoInstaller01000.dll
2015-08-13 13:25:36 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-13 13:12:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-13 13:06:56 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-08-13 12:56:26 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2015-08-13 12:53:09 ----D---- C:\Program Files (x86)\USB Camera
2015-08-13 12:53:01 ----D---- C:\Program Files\CONEXANT
2015-08-13 12:52:36 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-13 12:52:22 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-08-13 12:52:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-13 12:52:04 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-08-13 12:52:04 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-08-13 12:51:56 ----D---- C:\Program Files\Intel
2015-08-13 12:51:25 ----D---- C:\Program Files\Elantech
2015-08-13 12:49:54 ----D---- C:\WINDOWS\Prefetch
2015-08-10 11:12:10 ----D---- C:\Users\Jan\AppData\Roaming\LolClient
2015-08-10 04:11:32 ----D---- C:\ProgramData\Riot Games
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-08-10 04:09:27 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-08-10 04:07:25 ----D---- C:\Users\Jan\AppData\Roaming\Riot Games

======List of files/folders modified in the last 1 month======

2015-08-24 20:18:24 ----RD---- C:\Program Files
2015-08-24 20:13:00 ----D---- C:\WINDOWS\system32\sru
2015-08-24 20:09:27 ----D---- C:\WINDOWS\Temp
2015-08-24 20:09:27 ----D---- C:\WINDOWS\System32
2015-08-24 18:11:23 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-08-24 18:07:28 ----RD---- C:\Program Files (x86)
2015-08-24 18:07:27 ----D---- C:\Program Files (x86)\Amazon
2015-08-24 16:58:30 ----D---- C:\Windows
2015-08-24 16:57:32 ----D---- C:\WINDOWS\Tasks
2015-08-24 16:57:32 ----D---- C:\WINDOWS\system32\Tasks
2015-08-24 15:23:25 ----SHD---- C:\WINDOWS\Installer
2015-08-24 15:23:25 ----SD---- C:\ProgramData\Microsoft
2015-08-24 11:31:49 ----D---- C:\WINDOWS\Microsoft.NET
2015-08-23 18:58:21 ----D---- C:\Program Files (x86)\Rockstar Games
2015-08-23 18:58:03 ----D---- C:\Program Files\Rockstar Games
2015-08-23 11:27:57 ----D---- C:\WINDOWS\AppReadiness
2015-08-23 11:27:56 ----HD---- C:\Program Files\WindowsApps
2015-08-22 17:45:24 ----D---- C:\WINDOWS\rescache
2015-08-21 15:30:04 ----D---- C:\WINDOWS\system32\config
2015-08-21 15:27:08 ----D---- C:\WINDOWS\INF
2015-08-21 15:19:35 ----D---- C:\WINDOWS\WinSxS
2015-08-21 15:15:48 ----D---- C:\WINDOWS\SysWOW64
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\appraiser
2015-08-21 15:15:47 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-21 15:15:47 ----D---- C:\WINDOWS\system32\drivers
2015-08-21 15:15:47 ----D---- C:\WINDOWS\AppPatch
2015-08-21 15:15:46 ----D---- C:\WINDOWS\system32\DriverStore
2015-08-21 15:15:44 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-20 17:42:16 ----SHD---- C:\System Volume Information
2015-08-20 13:18:37 ----D---- C:\WINDOWS\CbsTemp
2015-08-20 11:45:23 ----D---- C:\WINDOWS\debug
2015-08-19 17:42:36 ----D---- C:\WINDOWS\ModemLogs
2015-08-19 17:40:22 ----D---- C:\Program Files\CCleaner
2015-08-19 17:25:24 ----D---- C:\WINDOWS\system32\catroot2
2015-08-17 13:29:49 ----D---- C:\WINDOWS\system32\WDI
2015-08-16 22:32:39 ----D---- C:\WINDOWS\Logs
2015-08-16 19:48:18 ----HD---- C:\ProgramData
2015-08-16 19:43:09 ----D---- C:\WINDOWS\Help
2015-08-16 13:53:10 ----D---- C:\ProgramData\Origin
2015-08-15 17:03:11 ----SHD---- C:\$Recycle.Bin
2015-08-15 17:01:10 ----RD---- C:\Users
2015-08-15 11:43:20 ----RD---- C:\WINDOWS\assembly
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\oobe
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-14 09:07:59 ----D---- C:\WINDOWS\Provisioning
2015-08-14 09:07:58 ----D---- C:\Program Files\Internet Explorer
2015-08-14 09:07:58 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-14 08:52:24 ----D---- C:\WINDOWS\appcompat
2015-08-13 16:04:18 ----D---- C:\WINDOWS\system32\restore
2015-08-13 15:41:15 ----D---- C:\WINDOWS\OCR
2015-08-13 13:59:00 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-08-13 13:54:01 ----D---- C:\WINDOWS\SYSWOW64\sda
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\oobe
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Boot
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\system32\F12
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\en
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\migwiz
2015-08-13 13:36:35 ----SD---- C:\WINDOWS\system32\DiagSvcs
2015-08-13 13:36:35 ----D---- C:\WINDOWS\system32\en
2015-08-13 13:36:35 ----D---- C:\WINDOWS\servicing
2015-08-13 13:36:35 ----D---- C:\WINDOWS\en-US
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Journal
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Defender
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Defender
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-08-13 13:26:40 ----D---- C:\WINDOWS\system32\MUI
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpwsockx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpmodemx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dplaysvr.exe
2015-08-13 13:26:33 ----A---- C:\WINDOWS\SYSWOW64\dplayx.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnet.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2015-08-13 13:23:04 ----RD---- C:\WINDOWS\PurchaseDialog
2015-08-13 13:23:03 ----RD---- C:\WINDOWS\PrintDialog
2015-08-13 13:23:01 ----RD---- C:\WINDOWS\MiracastView
2015-08-13 13:22:29 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-08-13 13:21:52 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-08-13 13:18:28 ----D---- C:\Program Files\Windows NT
2015-08-13 13:17:58 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-13 13:16:13 ----D---- C:\WINDOWS\Registration
2015-08-13 13:12:34 ----D---- C:\WINDOWS\system32\LogFiles
2015-08-13 13:12:18 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-13 13:08:46 ----D---- C:\WINDOWS\system32\wbem
2015-08-13 13:03:09 ----D---- C:\WINDOWS\system32\CatRoot
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2015-08-13 13:00:13 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-TW
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-HK
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-CN
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\uk-UA
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\tr-TR
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\th-TH
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sv-SE
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\spool
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sl-SI
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sk-SK
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ru-RU
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ro-RO
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-PT
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-BR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\pl-PL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nl-NL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\NDF
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nb-NO
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\migration
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lv-LV
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lt-LT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ko-KR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ja-JP
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\it-IT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\InputMethod
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\IME
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hu-HU
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hr-HR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\he-IL
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fr-FR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fi-FI
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\et-EE
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\es-ES
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\en-GB
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\el-GR
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\de-DE
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\da-DK
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\bg-BG
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\ar-SA
2015-08-13 12:58:32 ----D---- C:\WINDOWS\MediaViewer
2015-08-13 12:58:30 ----D---- C:\WINDOWS\InputMethod
2015-08-13 12:58:25 ----RSD---- C:\WINDOWS\Fonts
2015-08-13 12:58:24 ----D---- C:\WINDOWS\ADFS
2015-08-13 12:58:21 ----D---- C:\ProgramData\PRICache
2015-08-13 12:58:15 ----D---- C:\Program Files (x86)\Windows Mail
2015-08-13 12:58:13 ----D---- C:\Program Files (x86)\Common Files
2015-08-13 12:58:10 ----D---- C:\Program Files\Windows Mail
2015-08-13 12:58:07 ----D---- C:\Program Files\Lenovo
2015-08-13 12:58:04 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-13 12:58:03 ----D---- C:\Program Files\Common Files
2015-08-13 12:57:48 ----D---- C:\WINDOWS\system32\Recovery
2015-08-13 12:57:21 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-13 12:55:13 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-13 12:53:09 ----D---- C:\WINDOWS\twain_32
2015-08-13 12:53:09 ----D---- C:\WINDOWS\System
2015-08-13 12:13:42 ----HD---- C:\$Windows.~BT
2015-08-12 21:50:42 ----D---- C:\WINDOWS\system32\MRT
2015-08-12 21:50:37 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-10 22:22:11 ----D---- C:\Users\Jan\AppData\Roaming\Skype
2015-08-10 11:06:48 ----D---- C:\ProgramData\Skype
2015-08-10 11:06:44 ----RD---- C:\Program Files (x86)\Skype
2015-08-10 04:09:12 ----D---- C:\Games
2015-08-08 17:38:46 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2014-11-07 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-08-11 41592]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 ACPIVPC;@oem26.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-11-07 33560]
R3 bcbtums;@oem40.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2015-07-10 7593176]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 ETD;@oem46.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-08-13 428216]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-11 3789240]
R3 IntcDAud;@oem30.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem19.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-06-26 39480]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-07-10 129224]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-11 11174544]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem32.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-04-03 38032]
R3 RTSUER;@oem35.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-07-10 928768]
S3 btwampfl;@oem40.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 HtcVCom32;@oem6.inf,%OEMSerialPortName00%;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [2010-03-09 121800]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 massfilter;Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 11776]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-13 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem13.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-13 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2015-07-10 131584]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2011-03-08 122608]
R2 BcmBtRSupport;@oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-08-13 135352]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-06-27 87368]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-11 319888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-21 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-07 937776]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 365376]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-11 281488]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 Origin Client Service;Origin Client Service; C:\Games\Origin\OriginClientService.exe [2015-04-01 1931632]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-13 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\Program Files (x86)\Skype\Toolbars

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Honza at 2015-08-24 21:59:14
Microsoft Windows 10 Home
System drive C: has 604 GB (67%) free of 904 GB
Total RAM: 3962 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:59:20, on 24. 8. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Jan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Remote Mouse] C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: @oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Games\Origin\OriginClientService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10137 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ccf8686b-ddc2-48c4-988d-3b54d21bbba8 -SystemEventPortName:HostProcess-aef72963-7fe9-48d9-b0fe-2a2256ca9ced -IoCancelEventPortName:HostProcess-4ad2c25e-cccb-4c95-a776-2d9930113773 -NonStateChangingEventPortName:HostProcess-9f0b2c28-af18-4f89-b6ee-bdf426dd0f89 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e5bee54f-927a-4091-9a5f-f06c65b50a89 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"

"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
dashost.exe {36023559-c395-42c7-bacd6df6c1f12da4}
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" acad6491-d250-4e65-944b-9edeafb64569
\??\C:\WINDOWS\system32\conhost.exe 0x4

"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {145E6294-737A-4263-BC5B-CA7551F57824}
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
adb fork-server server
igfxHK.exe
igfxTray.exe
"C:\WINDOWS\notepad.exe" C:\_OTM\MovedFiles\08242015_213013.log
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 6B4FEB56-167B-AC63-5458-59306FA1FFE3 -Reinvoke
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3775995483-125773328-2494192704-10021_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3775995483-125773328-2494192704-10021 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Users\Jan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"

"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:5600 CREDAT:140545 EDGEHOST /prefetch:6
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:5600 CREDAT:140546 EDGEHOST /prefetch:6
taskhostw.exe
"C:\Users\Jan\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-08-13 3233976]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-07-11 384912]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2014-11-07 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2014-11-07 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-07-24 1710568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-07-17 8418584]
"GoogleChromeAutoLaunch_1F14D2380DB1DE09582B9D790BD95BA5"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-08-18 863560]
"Remote Mouse"=C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]
"OneDrive"=C:\Users\Jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-20 404064]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2015-06-12 561672]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-24 21:30:13 ----D---- C:\_OTM
2015-08-24 20:18:24 ----D---- C:\Program Files\trend micro
2015-08-24 18:06:28 ----D---- C:\AdwCleaner
2015-08-24 16:53:25 ----D---- C:\rsit
2015-08-24 15:24:06 ----D---- C:\Users\Jan\AppData\Roaming\NVIDIA
2015-08-24 15:23:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-24 15:22:32 ----D---- C:\Users\Jan\AppData\Roaming\System Checker
2015-08-24 15:22:07 ----D---- C:\Users\Jan\AppData\Roaming\Opera Software
2015-08-24 15:19:55 ----D---- C:\Program Files (x86)\Opera
2015-08-19 18:01:35 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-19 18:01:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 18:01:32 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 18:01:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-08-19 18:01:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 18:01:27 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-08-19 18:01:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 18:01:25 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 18:01:24 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-19 18:01:23 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 18:01:22 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 18:01:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 18:01:20 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 18:01:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-19 18:01:18 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 18:01:17 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 18:01:17 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 18:01:16 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 18:01:15 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 18:01:14 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 18:01:13 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 18:01:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 18:01:11 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 18:01:10 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 18:01:09 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 18:01:09 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-17 13:28:30 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-08-17 13:28:30 ----D---- C:\WINDOWS\system32\NV
2015-08-16 19:48:18 ----D---- C:\ProgramData\NVIDIA
2015-08-16 19:43:18 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-16 19:43:17 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-16 19:43:15 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-08-16 19:43:13 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-16 19:43:12 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-16 19:43:09 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-16 19:40:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-08-16 19:40:30 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-08-16 19:40:29 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-08-16 19:40:28 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-08-16 19:40:28 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-16 19:40:27 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-08-16 19:40:26 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-08-16 19:40:22 ----A---- C:\WINDOWS\system32\nvapi64.dll
2015-08-14 13:29:02 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-13 16:03:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:03:22 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-13 16:02:37 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-13 16:02:32 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-13 16:02:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-08-13 16:02:28 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-13 16:02:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-13 16:02:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-08-13 16:02:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-13 16:02:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-13 16:01:59 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-13 16:01:56 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-13 16:01:54 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-08-13 16:01:50 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-13 16:01:43 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-13 16:01:40 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-13 16:01:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-13 16:01:37 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-13 16:01:36 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-08-13 16:01:35 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-13 16:01:33 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-13 16:01:31 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-13 16:00:29 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-13 16:00:02 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-13 15:59:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-13 15:59:50 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-13 15:59:49 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-13 15:59:48 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-08-13 15:59:47 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-13 15:59:46 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-13 15:59:45 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-08-13 15:59:44 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\mf.dll
2015-08-13 15:59:43 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-13 15:59:42 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-13 15:59:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-08-13 15:59:39 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-08-13 15:59:38 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-13 15:59:37 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-13 15:59:36 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-13 15:59:35 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-13 15:59:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:30 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-13 15:59:29 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-08-13 15:59:27 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-08-13 15:59:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-13 15:59:25 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-08-13 15:59:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-13 15:59:19 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-13 15:59:18 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-13 15:59:16 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-13 15:59:14 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-13 15:59:10 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-13 15:59:09 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-13 15:58:57 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-13 15:58:53 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-13 15:58:44 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-08-13 15:58:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-13 15:58:38 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-13 15:58:37 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-08-13 15:58:35 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-08-13 15:58:34 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-13 15:58:33 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-13 15:58:32 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-13 15:58:27 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-13 15:58:26 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-13 15:58:25 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-13 15:58:24 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-08-13 15:58:19 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-08-13 15:58:18 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-13 15:58:01 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-08-13 15:57:03 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-13 15:56:53 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-13 15:56:52 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-08-13 15:56:50 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-13 15:56:49 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-13 15:56:47 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-13 15:56:46 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-13 15:56:45 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-13 15:56:42 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-13 15:56:36 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-13 15:56:35 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-13 15:56:34 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-13 15:56:34 ----A---- C:\WINDOWS\notepad.exe
2015-08-13 15:56:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-13 15:56:26 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-08-13 15:56:18 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-08-13 15:56:11 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-13 15:56:10 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-08-13 15:56:09 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-08-13 15:56:06 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-13 15:55:59 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-08-13 15:55:30 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-13 15:55:22 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-13 15:55:20 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-13 15:54:52 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-08-13 15:54:51 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-13 15:54:50 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-13 15:54:31 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-13 15:54:13 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-13 15:54:12 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-13 15:54:11 ----A---- C:\WINDOWS\system32\mfps.dll
2015-08-13 15:54:09 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-08-13 15:52:15 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-13 15:52:10 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-13 15:52:04 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-13 15:51:52 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-13 15:51:50 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-13 13:46:04 ----SHD---- C:\Recovery
2015-08-13 13:45:56 ----DC---- C:\WINDOWS\Panther
2015-08-13 13:42:37 ----D---- C:\Windows.old
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-13 13:41:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-13 13:41:25 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\wmp.dll
2015-08-13 13:41:24 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\stobject.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\calc.exe
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\bcd.dll
2015-08-13 13:41:23 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winresume.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winload.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wininet.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\wer.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\usocore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\mos.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\hal.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\efscore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-08-13 13:41:18 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-08-13 13:26:38 ----D---- C:\Program Files\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files\MSBuild
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-08-13 13:26:38 ----D---- C:\Program Files (x86)\MSBuild
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-08-13 13:26:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-13 13:25:57 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 13:25:47 ----A---- C:\WINDOWS\system32\ETDCoInstaller01000.dll
2015-08-13 13:25:36 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-13 13:12:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-13 13:06:56 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-08-13 12:56:26 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2015-08-13 12:53:09 ----D---- C:\Program Files (x86)\USB Camera
2015-08-13 12:53:01 ----D---- C:\Program Files\CONEXANT
2015-08-13 12:52:36 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-13 12:52:22 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-08-13 12:52:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-13 12:52:04 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-08-13 12:52:04 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-08-13 12:51:56 ----D---- C:\Program Files\Intel
2015-08-13 12:51:25 ----D---- C:\Program Files\Elantech
2015-08-13 12:49:54 ----D---- C:\WINDOWS\Prefetch
2015-08-10 11:12:10 ----D---- C:\Users\Jan\AppData\Roaming\LolClient
2015-08-10 04:11:32 ----D---- C:\ProgramData\Riot Games
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2015-08-10 04:09:28 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2015-08-10 04:09:27 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2015-08-10 04:07:25 ----D---- C:\Users\Jan\AppData\Roaming\Riot Games

======List of files/folders modified in the last 1 month======

2015-08-24 21:57:37 ----D---- C:\WINDOWS\Temp
2015-08-24 21:57:37 ----D---- C:\WINDOWS\System32
2015-08-24 21:34:03 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-08-24 21:31:55 ----D---- C:\WINDOWS\system32\sru
2015-08-24 21:30:52 ----D---- C:\WINDOWS\SysWOW64
2015-08-24 21:30:14 ----RD---- C:\Program Files (x86)\Skype
2015-08-24 21:30:14 ----D---- C:\WINDOWS\Tasks
2015-08-24 20:18:24 ----RD---- C:\Program Files
2015-08-24 18:07:28 ----RD---- C:\Program Files (x86)
2015-08-24 18:07:27 ----D---- C:\Program Files (x86)\Amazon
2015-08-24 16:58:30 ----D---- C:\Windows
2015-08-24 16:57:32 ----D---- C:\WINDOWS\system32\Tasks
2015-08-24 15:23:25 ----SHD---- C:\WINDOWS\Installer
2015-08-24 15:23:25 ----SD---- C:\ProgramData\Microsoft
2015-08-24 11:31:49 ----D---- C:\WINDOWS\Microsoft.NET
2015-08-23 18:58:21 ----D---- C:\Program Files (x86)\Rockstar Games
2015-08-23 18:58:03 ----D---- C:\Program Files\Rockstar Games
2015-08-23 11:27:57 ----D---- C:\WINDOWS\AppReadiness
2015-08-23 11:27:56 ----HD---- C:\Program Files\WindowsApps
2015-08-22 17:45:24 ----D---- C:\WINDOWS\rescache
2015-08-21 15:30:04 ----D---- C:\WINDOWS\system32\config
2015-08-21 15:27:08 ----D---- C:\WINDOWS\INF
2015-08-21 15:19:35 ----D---- C:\WINDOWS\WinSxS
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-08-21 15:15:48 ----D---- C:\WINDOWS\system32\appraiser
2015-08-21 15:15:47 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-21 15:15:47 ----D---- C:\WINDOWS\system32\drivers
2015-08-21 15:15:47 ----D---- C:\WINDOWS\AppPatch
2015-08-21 15:15:46 ----D---- C:\WINDOWS\system32\DriverStore
2015-08-21 15:15:44 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-20 17:42:16 ----SHD---- C:\System Volume Information
2015-08-20 13:18:37 ----D---- C:\WINDOWS\CbsTemp
2015-08-20 11:45:23 ----D---- C:\WINDOWS\debug
2015-08-19 17:42:36 ----D---- C:\WINDOWS\ModemLogs
2015-08-19 17:40:22 ----D---- C:\Program Files\CCleaner
2015-08-19 17:25:24 ----D---- C:\WINDOWS\system32\catroot2
2015-08-17 13:29:49 ----D---- C:\WINDOWS\system32\WDI
2015-08-16 22:32:39 ----D---- C:\WINDOWS\Logs
2015-08-16 19:48:18 ----HD---- C:\ProgramData
2015-08-16 19:43:09 ----D---- C:\WINDOWS\Help
2015-08-16 13:53:10 ----D---- C:\ProgramData\Origin
2015-08-15 17:03:11 ----SHD---- C:\$Recycle.Bin
2015-08-15 17:01:10 ----RD---- C:\Users
2015-08-15 11:43:20 ----RD---- C:\WINDOWS\assembly
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-08-14 09:08:11 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\oobe
2015-08-14 09:08:04 ----D---- C:\WINDOWS\system32\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-14 09:08:03 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-14 09:07:59 ----D---- C:\WINDOWS\Provisioning
2015-08-14 09:07:58 ----D---- C:\Program Files\Internet Explorer
2015-08-14 09:07:58 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-14 08:52:24 ----D---- C:\WINDOWS\appcompat
2015-08-13 16:04:18 ----D---- C:\WINDOWS\system32\restore
2015-08-13 15:41:15 ----D---- C:\WINDOWS\OCR
2015-08-13 13:59:00 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-08-13 13:54:01 ----D---- C:\WINDOWS\SYSWOW64\sda
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\oobe
2015-08-13 13:42:20 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Dism
2015-08-13 13:42:20 ----D---- C:\WINDOWS\system32\Boot
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2015-08-13 13:36:36 ----SD---- C:\WINDOWS\system32\F12
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\en
2015-08-13 13:36:36 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\winrm
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\WCN
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\slmgr
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-13 13:36:36 ----D---- C:\WINDOWS\system32\migwiz
2015-08-13 13:36:35 ----SD---- C:\WINDOWS\system32\DiagSvcs
2015-08-13 13:36:35 ----D---- C:\WINDOWS\system32\en
2015-08-13 13:36:35 ----D---- C:\WINDOWS\servicing
2015-08-13 13:36:35 ----D---- C:\WINDOWS\en-US
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Journal
2015-08-13 13:36:33 ----D---- C:\Program Files\Windows Defender
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Media Player
2015-08-13 13:36:33 ----D---- C:\Program Files (x86)\Windows Defender
2015-08-13 13:26:41 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-08-13 13:26:40 ----D---- C:\WINDOWS\system32\MUI
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpwsockx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dpmodemx.dll
2015-08-13 13:26:34 ----A---- C:\WINDOWS\SYSWOW64\dplaysvr.exe
2015-08-13 13:26:33 ----A---- C:\WINDOWS\SYSWOW64\dplayx.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2015-08-13 13:26:30 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnet.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2015-08-13 13:26:25 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2015-08-13 13:23:04 ----RD---- C:\WINDOWS\PurchaseDialog
2015-08-13 13:23:03 ----RD---- C:\WINDOWS\PrintDialog
2015-08-13 13:23:01 ----RD---- C:\WINDOWS\MiracastView
2015-08-13 13:22:29 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-08-13 13:21:52 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-08-13 13:18:28 ----D---- C:\Program Files\Windows NT
2015-08-13 13:17:58 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-13 13:16:13 ----D---- C:\WINDOWS\Registration
2015-08-13 13:12:34 ----D---- C:\WINDOWS\system32\LogFiles
2015-08-13 13:12:18 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-13 13:08:46 ----D---- C:\WINDOWS\system32\wbem
2015-08-13 13:03:09 ----D---- C:\WINDOWS\system32\CatRoot
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-08-13 13:02:56 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-08-13 13:00:17 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2015-08-13 13:00:16 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-08-13 13:00:15 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-08-13 13:00:14 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2015-08-13 13:00:13 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-08-13 13:00:10 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2015-08-13 13:00:09 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-TW
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-HK
2015-08-13 13:00:08 ----D---- C:\WINDOWS\system32\zh-CN
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-13 13:00:07 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\uk-UA
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\tr-TR
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\th-TH
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sv-SE
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2015-08-13 13:00:06 ----D---- C:\WINDOWS\system32\spool
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sl-SI
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\sk-SK
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ru-RU
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\ro-RO
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-PT
2015-08-13 13:00:05 ----D---- C:\WINDOWS\system32\pt-BR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\pl-PL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nl-NL
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\NDF
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\nb-NO
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\migration
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lv-LV
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\lt-LT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ko-KR
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\ja-JP
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\it-IT
2015-08-13 13:00:04 ----D---- C:\WINDOWS\system32\InputMethod
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\IME
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hu-HU
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\hr-HR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\he-IL
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fr-FR
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\fi-FI
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\et-EE
2015-08-13 13:00:03 ----D---- C:\WINDOWS\system32\es-ES
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\en-GB
2015-08-13 13:00:02 ----D---- C:\WINDOWS\system32\el-GR
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\de-DE
2015-08-13 13:00:01 ----D---- C:\WINDOWS\system32\da-DK
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\bg-BG
2015-08-13 12:58:36 ----D---- C:\WINDOWS\system32\ar-SA
2015-08-13 12:58:32 ----D---- C:\WINDOWS\MediaViewer
2015-08-13 12:58:30 ----D---- C:\WINDOWS\InputMethod
2015-08-13 12:58:25 ----RSD---- C:\WINDOWS\Fonts
2015-08-13 12:58:24 ----D---- C:\WINDOWS\ADFS
2015-08-13 12:58:21 ----D---- C:\ProgramData\PRICache
2015-08-13 12:58:15 ----D---- C:\Program Files (x86)\Windows Mail
2015-08-13 12:58:13 ----D---- C:\Program Files (x86)\Common Files
2015-08-13 12:58:10 ----D---- C:\Program Files\Windows Mail
2015-08-13 12:58:07 ----D---- C:\Program Files\Lenovo
2015-08-13 12:58:04 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-13 12:58:03 ----D---- C:\Program Files\Common Files
2015-08-13 12:57:48 ----D---- C:\WINDOWS\system32\Recovery
2015-08-13 12:57:21 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-13 12:55:13 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-13 12:53:09 ----D---- C:\WINDOWS\twain_32
2015-08-13 12:53:09 ----D---- C:\WINDOWS\System
2015-08-13 12:13:42 ----HD---- C:\$Windows.~BT
2015-08-12 21:50:42 ----D---- C:\WINDOWS\system32\MRT
2015-08-12 21:50:37 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-10 22:22:11 ----D---- C:\Users\Jan\AppData\Roaming\Skype
2015-08-10 11:06:48 ----D---- C:\ProgramData\Skype
2015-08-10 04:09:12 ----D---- C:\Games
2015-08-08 17:38:46 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2014-11-07 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-08-11 41592]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 ACPIVPC;@oem26.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-11-07 33560]
R3 bcbtums;@oem40.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2015-07-10 7593176]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 ETD;@oem46.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-08-13 428216]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-11 3789240]
R3 IntcDAud;@oem30.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem19.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-06-26 39480]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-07-10 129224]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-11 11174544]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem32.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-04-03 38032]
R3 RTSUER;@oem35.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-07-10 928768]
S3 btwampfl;@oem40.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 HtcVCom32;@oem6.inf,%OEMSerialPortName00%;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [2010-03-09 121800]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 massfilter;Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 11776]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-13 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem13.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-13 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2015-07-10 131584]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-08-13 67072]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2011-03-08 122608]
R2 BcmBtRSupport;@oem40.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-08-13 135352]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-06-27 87368]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-11 319888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-21 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-07 937776]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 365376]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-11 281488]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 Origin Client Service;Origin Client Service; C:\Games\Origin\OriginClientService.exe [2015-04-01 1931632]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-13 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Smazáno. Znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte. Nastala nějaká změna?

frst mi nejde spustit píše mi to "no fixlist.txn found"

Pardon, spletl jsem se. Má být OTM (se stejným skriptem) a vypněte při tom antivir.