Prosím o pomoc virus v pc
Napsal: 05 zář 2015 14:47
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ritter at 2015-09-05 15:42:59
Microsoft Windows 10 Pro
System drive C: has 20 GB (26%) free of 76 GB
Total RAM: 3582 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:43:21, on 5.9.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\SFK\SFKEX.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\Windows\System32\InstallAgent.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\Ritter\Downloads\RSIT.exe
C:\Program Files\trend micro\Ritter.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... E2F1909329
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files\HDD Regenerator\Shell.exe" /1
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA WMI Provider (NVWMI) - NVIDIA Corporation - C:\Windows\system32\nvwmi.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SSFK - TODO: <???> - C:\Program Files\SFK\SSFK.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: WdsManPro Service (WdsManPro) - DTools LIMITED - C:\ProgramData\1WdsManPro1\WdsManPro.exe
--
End of file - 6221 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
"defsearchp@gmail.com"=C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\defsearchp@gmail.com
"deskCutv2@gmail.com"=C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\deskCutv2@gmail.com
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\
superstart@enjoyfreeware.org
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-13 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-13 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-09-05 2586912]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
"HDD Regenerator"=C:\Program Files\HDD Regenerator\Shell.exe /1 []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2015-08-07 53729824]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-04 1603152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-05 15:42:59 ----D---- C:\rsit
2015-09-05 15:42:59 ----D---- C:\Program Files\trend micro
2015-09-01 18:26:09 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-01 17:43:16 ----SHD---- C:\Config.Msi
2015-09-01 17:24:16 ----AD---- C:\ProgramData\TEMP
2015-09-01 17:23:49 ----D---- C:\Program Files\HDD Regenerator
2015-08-31 16:56:25 ----D---- C:\Program Files\HDDGURU LLF Tool
2015-08-31 16:47:03 ----D---- C:\Users\Ritter\AppData\Roaming\dlg
2015-08-31 16:43:54 ----D---- C:\Program Files\SFK
2015-08-31 16:43:42 ----D---- C:\ProgramData\1WdsManPro1
2015-08-31 16:43:42 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-08-31 16:43:02 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-31 16:42:50 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-31 16:42:32 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-31 16:42:31 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-31 16:42:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-31 16:42:30 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-31 16:42:30 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-31 16:42:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-31 16:42:29 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-31 16:42:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-31 16:42:28 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-29 12:34:30 ----D---- C:\Users\Ritter\AppData\Roaming\Ulozto File Manager
2015-08-29 12:34:27 ----D---- C:\Program Files\Ulozto File Manager
2015-08-28 23:49:49 ----D---- C:\Program Files\Mozilla Firefox
2015-08-21 17:46:58 ----D---- C:\Program Files\Mio
2015-08-20 20:16:45 ----D---- C:\Users\Ritter\AppData\Roaming\Skype
2015-08-20 20:16:36 ----D---- C:\Program Files\Common Files\Skype
2015-08-20 20:16:33 ----RD---- C:\Program Files\Skype
2015-08-20 20:16:29 ----D---- C:\ProgramData\Skype
2015-08-19 15:50:05 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 15:50:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 15:49:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 15:49:58 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 15:49:58 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 15:49:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 15:49:55 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 15:49:55 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\GnssAdapter.dll
2015-08-19 15:49:48 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-08-19 15:49:48 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-16 10:30:42 ----D---- C:\ProgramData\Acronis
2015-08-15 11:18:39 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-13 17:28:29 ----D---- C:\Program Files\Common Files\Java
2015-08-12 19:28:56 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-12 18:02:09 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-12 18:02:04 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-12 18:02:00 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-12 18:02:00 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\notepad.exe
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-12 18:01:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-09 18:46:34 ----DC---- C:\WINDOWS\Panther
2015-08-09 18:43:52 ----A---- C:\WINDOWS\system32\drivers\oz776.sys
2015-08-09 18:43:52 ----A---- C:\WINDOWS\system32\ct32O2.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-08-09 18:42:38 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wmp.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\bcd.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\stobject.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\halmacpi.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\hal.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\calc.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winresume.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winload.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wininit.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wininet.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\usocore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\mos.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\efscore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\XPSViewer
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\msmq
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\BestPractices
2015-08-09 18:37:33 ----D---- C:\Program Files\Reference Assemblies
2015-08-09 18:37:33 ----D---- C:\inetpub
2015-08-09 18:37:33 ----AD---- C:\Program Files\MSBuild
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-09 18:12:07 ----SHD---- C:\Recovery
2015-08-09 18:10:28 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-08-09 17:57:27 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-08-09 17:55:27 ----SD---- C:\Users\Ritter\AppData\Roaming\Microsoft
2015-08-09 17:53:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-09 17:50:59 ----D---- C:\ProgramData\NVIDIA
2015-08-09 17:50:51 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-09 17:50:51 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvsvc.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-09 17:50:33 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-09 17:50:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-09 17:49:18 ----D---- C:\WINDOWS\Prefetch
2015-08-09 17:47:26 ----ASH---- C:\swapfile.sys
======List of files/folders modified in the last 1 month======
2015-09-05 15:43:08 ----HD---- C:\Program Files\WindowsApps
2015-09-05 15:42:59 ----RD---- C:\Program Files
2015-09-05 15:42:29 ----D---- C:\WINDOWS\Temp
2015-09-05 15:41:32 ----D---- C:\WINDOWS\AppReadiness
2015-09-05 15:38:08 ----HD---- C:\ProgramData
2015-09-05 15:38:04 ----D---- C:\WINDOWS\system32\sru
2015-09-05 15:37:27 ----AD---- C:\WINDOWS\System32
2015-09-02 18:03:48 ----D---- C:\WINDOWS\INF
2015-09-01 18:30:23 ----D---- C:\Windows
2015-09-01 18:14:09 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-01 17:56:15 ----D---- C:\Users\Ritter\AppData\Roaming\vlc
2015-09-01 17:46:58 ----D---- C:\WINDOWS\system32\config
2015-09-01 17:46:55 ----D---- C:\WINDOWS\WinSxS
2015-09-01 17:46:06 ----D---- C:\WINDOWS\system32\drivers
2015-09-01 17:46:03 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\oobe
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\appraiser
2015-09-01 17:44:53 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-01 17:44:53 ----D---- C:\WINDOWS\apppatch
2015-09-01 17:43:24 ----SHD---- C:\WINDOWS\Installer
2015-09-01 14:15:35 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-01 00:04:30 ----D---- C:\WINDOWS\CbsTemp
2015-08-31 16:44:01 ----D---- C:\WINDOWS\system32\Tasks
2015-08-31 16:39:41 ----D---- C:\WINDOWS\system32\catroot2
2015-08-31 16:36:22 ----D---- C:\Program Files\Common Files
2015-08-29 11:58:39 ----D---- C:\Program Files\JDownloader
2015-08-26 18:17:44 ----RD---- C:\Users
2015-08-21 18:18:59 ----D---- C:\WINDOWS\rescache
2015-08-21 17:50:29 ----RSD---- C:\WINDOWS\assembly
2015-08-20 19:16:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-18 15:57:09 ----D---- C:\WINDOWS\system32\WDI
2015-08-16 20:19:21 ----SHD---- C:\$Recycle.Bin
2015-08-15 11:18:28 ----D---- C:\WINDOWS\Logs
2015-08-13 17:34:56 ----AD---- C:\Program Files\Microsoft Silverlight
2015-08-13 17:33:35 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-13 17:33:35 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-13 17:32:11 ----D---- C:\WINDOWS\debug
2015-08-13 17:28:52 ----D---- C:\ProgramData\Oracle
2015-08-13 17:28:05 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-08-13 17:27:55 ----D---- C:\Program Files\Java
2015-08-13 17:15:42 ----SD---- C:\ProgramData\Microsoft
2015-08-13 15:13:56 ----D---- C:\ProgramData\Microsoft Help
2015-08-13 15:12:39 ----D---- C:\WINDOWS\system32\MRT
2015-08-12 19:56:21 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-12 19:54:10 ----A---- C:\WINDOWS\win.ini
2015-08-12 13:26:31 ----SHD---- C:\System Volume Information
2015-08-11 16:10:08 ----AD---- C:\Program Files\Kingo ROOT
2015-08-11 15:33:12 ----D---- C:\WINDOWS\AppCompat
2015-08-09 18:43:33 ----D---- C:\WINDOWS\OCR
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\Dism
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\Boot
2015-08-09 18:43:07 ----D---- C:\WINDOWS\Provisioning
2015-08-09 18:43:07 ----D---- C:\Program Files\Internet Explorer
2015-08-09 18:40:02 ----RD---- C:\WINDOWS\PurchaseDialog
2015-08-09 18:40:01 ----RD---- C:\WINDOWS\PrintDialog
2015-08-09 18:40:01 ----RD---- C:\WINDOWS\MiracastView
2015-08-09 18:39:38 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\MUI
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\inetsrv
2015-08-09 18:37:29 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-08-09 18:37:29 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-08-09 18:37:27 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-08-09 18:37:27 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-08-09 18:37:23 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-08-09 18:37:23 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-08-09 18:37:19 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-08-09 18:37:18 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-08-09 18:37:17 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-08-09 18:13:09 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-09 18:12:18 ----D---- C:\Program Files\Windows NT
2015-08-09 18:10:59 ----D---- C:\WINDOWS\Registration
2015-08-09 18:10:16 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-09 18:10:07 ----RSD---- C:\WINDOWS\Media
2015-08-09 18:09:24 ----D---- C:\WINDOWS\system32\wbem
2015-08-09 18:02:51 ----D---- C:\WINDOWS\system32\en-US
2015-08-09 18:02:50 ----D---- C:\WINDOWS\ShellNew
2015-08-09 18:02:44 ----D---- C:\WINDOWS\Tasks
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-TW
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-HK
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-CN
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\tr-TR
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\sv-SE
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\SPReview
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\ru-RU
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pt-PT
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pt-BR
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pl-PL
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\nl-NL
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\NDF
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\nb-NO
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\migration
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\ko-KR
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\ja-JP
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\it-IT
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\IME
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\hu-HU
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\fr-FR
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\fi-FI
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\EventProviders
2015-08-09 17:58:52 ----D---- C:\WINDOWS\system32\es-ES
2015-08-09 17:58:52 ----D---- C:\WINDOWS\system32\el-GR
2015-08-09 17:58:51 ----D---- C:\WINDOWS\system32\de-DE
2015-08-09 17:58:51 ----D---- C:\WINDOWS\system32\da-DK
2015-08-09 17:58:01 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-09 17:57:57 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2015-08-09 17:57:57 ----D---- C:\WINDOWS\system32\appmgmt
2015-08-09 17:57:50 ----D---- C:\WINDOWS\schemas
2015-08-09 17:57:50 ----D---- C:\WINDOWS\PolicyDefinitions
2015-08-09 17:57:49 ----D---- C:\WINDOWS\LiveKernelReports
2015-08-09 17:57:44 ----RSD---- C:\WINDOWS\Fonts
2015-08-09 17:57:44 ----D---- C:\WINDOWS\Help
2015-08-09 17:57:43 ----D---- C:\WINDOWS\ehome
2015-08-09 17:57:31 ----SHD---- C:\Program Files\Windows Sidebar
2015-08-09 17:57:31 ----D---- C:\Program Files\Windows Mail
2015-08-09 17:57:29 ----D---- C:\Program Files\Microsoft.NET
2015-08-09 17:57:27 ----D---- C:\Program Files\DVD Maker
2015-08-09 17:57:27 ----D---- C:\Program Files\Common Files\System
2015-08-09 17:57:27 ----AD---- C:\Program Files\Common Files\microsoft shared
2015-08-09 17:56:38 ----D---- C:\WINDOWS\system32\Recovery
2015-08-09 17:53:11 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-08 17:38:46 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 74240]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 7680]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 37376]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 52736]
R3 b57nd60x;@netb57vx.inf,%SvcDispName%;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\b57nd60x.sys [2015-07-10 401408]
R3 guardian2;guardian2; C:\WINDOWS\System32\Drivers\oz776.sys [2015-08-09 72184]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-09 130048]
R3 netwlv32; Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\WINDOWS\System32\drivers\netwlv32.sys [2015-07-10 6637056]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-06-29 10704072]
R3 SrvHsfHDA;SrvHsfHDA; C:\WINDOWS\system32\DRIVERS\VSTAZL3.SYS [2015-07-10 207360]
R3 SrvHsfV92;SrvHsfV92; C:\WINDOWS\system32\DRIVERS\VSTDPV3.SYS [2015-07-10 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\WINDOWS\system32\DRIVERS\VSTCNXT3.SYS [2015-07-10 661504]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 83296]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 33632]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 23552]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 96768]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 24064]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-07-10 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 37728]
S3 HTCAND32;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-10-27 25088]
S3 HtcVCom32;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV32.sys [2009-10-27 105984]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-07-10 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 23040]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 45056]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-09 32768]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 31744]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 190816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 73568]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 100704]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 42848]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 21856]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 21856]
S3 USBAAPL;@oem7.inf,%USBAAPL.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2015-06-10 45056]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-08-09 48128]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\WINDOWS\System32\drivers\vhf.sys [2015-07-10 24064]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 60744]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-09 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-06-29 670536]
R2 NVWMI;NVIDIA WMI Provider; C:\Windows\system32\nvwmi.exe [2013-09-05 1027872]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 SSFK;SSFK; C:\Program Files\SFK\SSFK.exe [2015-08-31 448000]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-16 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 23040]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-05-29 43696]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-02-13 136120]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-07-11 541992]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-28 149160]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 41864]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-09 669696]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-07-10 45240]
-----------------EOF-----------------
Run by Ritter at 2015-09-05 15:42:59
Microsoft Windows 10 Pro
System drive C: has 20 GB (26%) free of 76 GB
Total RAM: 3582 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:43:21, on 5.9.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\SFK\SFKEX.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\Windows\System32\InstallAgent.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\Ritter\Downloads\RSIT.exe
C:\Program Files\trend micro\Ritter.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... E2F1909329
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files\HDD Regenerator\Shell.exe" /1
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA WMI Provider (NVWMI) - NVIDIA Corporation - C:\Windows\system32\nvwmi.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SSFK - TODO: <???> - C:\Program Files\SFK\SSFK.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: WdsManPro Service (WdsManPro) - DTools LIMITED - C:\ProgramData\1WdsManPro1\WdsManPro.exe
--
End of file - 6221 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
"defsearchp@gmail.com"=C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\defsearchp@gmail.com
"deskCutv2@gmail.com"=C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\deskCutv2@gmail.com
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
C:\Users\Ritter\AppData\Roaming\Mozilla\Firefox\Profiles\20enb65o.default\extensions\
superstart@enjoyfreeware.org
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-13 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-13 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-09-05 2586912]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
"HDD Regenerator"=C:\Program Files\HDD Regenerator\Shell.exe /1 []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2015-08-07 53729824]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-04 1603152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-05 15:42:59 ----D---- C:\rsit
2015-09-05 15:42:59 ----D---- C:\Program Files\trend micro
2015-09-01 18:26:09 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-01 17:43:16 ----SHD---- C:\Config.Msi
2015-09-01 17:24:16 ----AD---- C:\ProgramData\TEMP
2015-09-01 17:23:49 ----D---- C:\Program Files\HDD Regenerator
2015-08-31 16:56:25 ----D---- C:\Program Files\HDDGURU LLF Tool
2015-08-31 16:47:03 ----D---- C:\Users\Ritter\AppData\Roaming\dlg
2015-08-31 16:43:54 ----D---- C:\Program Files\SFK
2015-08-31 16:43:42 ----D---- C:\ProgramData\1WdsManPro1
2015-08-31 16:43:42 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-08-31 16:43:02 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-31 16:42:50 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-31 16:42:32 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-31 16:42:31 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-31 16:42:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-31 16:42:30 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-31 16:42:30 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-31 16:42:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-31 16:42:29 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-31 16:42:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-31 16:42:28 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2015-08-31 16:42:27 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-31 16:42:26 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-31 16:42:25 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-29 12:34:30 ----D---- C:\Users\Ritter\AppData\Roaming\Ulozto File Manager
2015-08-29 12:34:27 ----D---- C:\Program Files\Ulozto File Manager
2015-08-28 23:49:49 ----D---- C:\Program Files\Mozilla Firefox
2015-08-21 17:46:58 ----D---- C:\Program Files\Mio
2015-08-20 20:16:45 ----D---- C:\Users\Ritter\AppData\Roaming\Skype
2015-08-20 20:16:36 ----D---- C:\Program Files\Common Files\Skype
2015-08-20 20:16:33 ----RD---- C:\Program Files\Skype
2015-08-20 20:16:29 ----D---- C:\ProgramData\Skype
2015-08-19 15:50:05 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 15:50:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 15:49:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 15:49:58 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 15:49:58 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 15:49:57 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 15:49:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 15:49:55 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 15:49:55 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 15:49:54 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 15:49:53 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 15:49:52 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 15:49:51 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 15:49:50 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 15:49:49 ----A---- C:\WINDOWS\system32\GnssAdapter.dll
2015-08-19 15:49:48 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-08-19 15:49:48 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-16 10:30:42 ----D---- C:\ProgramData\Acronis
2015-08-15 11:18:39 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-13 17:28:29 ----D---- C:\Program Files\Common Files\Java
2015-08-12 19:28:56 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-12 18:02:09 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-12 18:02:04 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-12 18:02:00 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-12 18:02:00 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-12 18:01:59 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-12 18:01:58 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-12 18:01:57 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-12 18:01:56 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-12 18:01:56 ----A---- C:\WINDOWS\notepad.exe
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-12 18:01:54 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-12 18:01:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-12 18:01:50 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-12 18:01:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-09 18:46:34 ----DC---- C:\WINDOWS\Panther
2015-08-09 18:43:52 ----A---- C:\WINDOWS\system32\drivers\oz776.sys
2015-08-09 18:43:52 ----A---- C:\WINDOWS\system32\ct32O2.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-08-09 18:43:29 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-08-09 18:42:38 ----D---- C:\ProgramData\Microsoft OneDrive
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-09 18:42:34 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\wmp.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\bcd.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-09 18:42:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\stobject.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\halmacpi.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\hal.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\calc.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-08-09 18:42:24 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winresume.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winload.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wininit.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wininet.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\usocore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\mos.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\efscore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-09 18:42:23 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\XPSViewer
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\msmq
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\BestPractices
2015-08-09 18:37:33 ----D---- C:\Program Files\Reference Assemblies
2015-08-09 18:37:33 ----D---- C:\inetpub
2015-08-09 18:37:33 ----AD---- C:\Program Files\MSBuild
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-09 18:36:59 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-09 18:12:07 ----SHD---- C:\Recovery
2015-08-09 18:10:28 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-08-09 17:57:27 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-08-09 17:55:27 ----SD---- C:\Users\Ritter\AppData\Roaming\Microsoft
2015-08-09 17:53:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-09 17:50:59 ----D---- C:\ProgramData\NVIDIA
2015-08-09 17:50:51 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-09 17:50:51 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvsvc.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-09 17:50:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-09 17:50:33 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-09 17:50:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-08-09 17:49:18 ----D---- C:\WINDOWS\Prefetch
2015-08-09 17:47:26 ----ASH---- C:\swapfile.sys
======List of files/folders modified in the last 1 month======
2015-09-05 15:43:08 ----HD---- C:\Program Files\WindowsApps
2015-09-05 15:42:59 ----RD---- C:\Program Files
2015-09-05 15:42:29 ----D---- C:\WINDOWS\Temp
2015-09-05 15:41:32 ----D---- C:\WINDOWS\AppReadiness
2015-09-05 15:38:08 ----HD---- C:\ProgramData
2015-09-05 15:38:04 ----D---- C:\WINDOWS\system32\sru
2015-09-05 15:37:27 ----AD---- C:\WINDOWS\System32
2015-09-02 18:03:48 ----D---- C:\WINDOWS\INF
2015-09-01 18:30:23 ----D---- C:\Windows
2015-09-01 18:14:09 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-01 17:56:15 ----D---- C:\Users\Ritter\AppData\Roaming\vlc
2015-09-01 17:46:58 ----D---- C:\WINDOWS\system32\config
2015-09-01 17:46:55 ----D---- C:\WINDOWS\WinSxS
2015-09-01 17:46:06 ----D---- C:\WINDOWS\system32\drivers
2015-09-01 17:46:03 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\oobe
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-09-01 17:44:54 ----D---- C:\WINDOWS\system32\appraiser
2015-09-01 17:44:53 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-01 17:44:53 ----D---- C:\WINDOWS\apppatch
2015-09-01 17:43:24 ----SHD---- C:\WINDOWS\Installer
2015-09-01 14:15:35 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-01 00:04:30 ----D---- C:\WINDOWS\CbsTemp
2015-08-31 16:44:01 ----D---- C:\WINDOWS\system32\Tasks
2015-08-31 16:39:41 ----D---- C:\WINDOWS\system32\catroot2
2015-08-31 16:36:22 ----D---- C:\Program Files\Common Files
2015-08-29 11:58:39 ----D---- C:\Program Files\JDownloader
2015-08-26 18:17:44 ----RD---- C:\Users
2015-08-21 18:18:59 ----D---- C:\WINDOWS\rescache
2015-08-21 17:50:29 ----RSD---- C:\WINDOWS\assembly
2015-08-20 19:16:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-18 15:57:09 ----D---- C:\WINDOWS\system32\WDI
2015-08-16 20:19:21 ----SHD---- C:\$Recycle.Bin
2015-08-15 11:18:28 ----D---- C:\WINDOWS\Logs
2015-08-13 17:34:56 ----AD---- C:\Program Files\Microsoft Silverlight
2015-08-13 17:33:35 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-13 17:33:35 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-13 17:32:11 ----D---- C:\WINDOWS\debug
2015-08-13 17:28:52 ----D---- C:\ProgramData\Oracle
2015-08-13 17:28:05 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-08-13 17:27:55 ----D---- C:\Program Files\Java
2015-08-13 17:15:42 ----SD---- C:\ProgramData\Microsoft
2015-08-13 15:13:56 ----D---- C:\ProgramData\Microsoft Help
2015-08-13 15:12:39 ----D---- C:\WINDOWS\system32\MRT
2015-08-12 19:56:21 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-12 19:54:10 ----A---- C:\WINDOWS\win.ini
2015-08-12 13:26:31 ----SHD---- C:\System Volume Information
2015-08-11 16:10:08 ----AD---- C:\Program Files\Kingo ROOT
2015-08-11 15:33:12 ----D---- C:\WINDOWS\AppCompat
2015-08-09 18:43:33 ----D---- C:\WINDOWS\OCR
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\Dism
2015-08-09 18:43:08 ----D---- C:\WINDOWS\system32\Boot
2015-08-09 18:43:07 ----D---- C:\WINDOWS\Provisioning
2015-08-09 18:43:07 ----D---- C:\Program Files\Internet Explorer
2015-08-09 18:40:02 ----RD---- C:\WINDOWS\PurchaseDialog
2015-08-09 18:40:01 ----RD---- C:\WINDOWS\PrintDialog
2015-08-09 18:40:01 ----RD---- C:\WINDOWS\MiracastView
2015-08-09 18:39:38 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\MUI
2015-08-09 18:37:33 ----D---- C:\WINDOWS\system32\inetsrv
2015-08-09 18:37:29 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-08-09 18:37:29 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-08-09 18:37:27 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-08-09 18:37:27 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-08-09 18:37:23 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-08-09 18:37:23 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-08-09 18:37:20 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-08-09 18:37:19 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-08-09 18:37:18 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-08-09 18:37:17 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-08-09 18:13:09 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-09 18:12:18 ----D---- C:\Program Files\Windows NT
2015-08-09 18:10:59 ----D---- C:\WINDOWS\Registration
2015-08-09 18:10:16 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-09 18:10:07 ----RSD---- C:\WINDOWS\Media
2015-08-09 18:09:24 ----D---- C:\WINDOWS\system32\wbem
2015-08-09 18:02:51 ----D---- C:\WINDOWS\system32\en-US
2015-08-09 18:02:50 ----D---- C:\WINDOWS\ShellNew
2015-08-09 18:02:44 ----D---- C:\WINDOWS\Tasks
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-TW
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-HK
2015-08-09 17:59:01 ----D---- C:\WINDOWS\system32\zh-CN
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\tr-TR
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\sv-SE
2015-08-09 17:59:00 ----D---- C:\WINDOWS\system32\SPReview
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\ru-RU
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pt-PT
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pt-BR
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\pl-PL
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\nl-NL
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\NDF
2015-08-09 17:58:56 ----D---- C:\WINDOWS\system32\nb-NO
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\migration
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\ko-KR
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\ja-JP
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\it-IT
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\IME
2015-08-09 17:58:55 ----D---- C:\WINDOWS\system32\hu-HU
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\fr-FR
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\fi-FI
2015-08-09 17:58:54 ----D---- C:\WINDOWS\system32\EventProviders
2015-08-09 17:58:52 ----D---- C:\WINDOWS\system32\es-ES
2015-08-09 17:58:52 ----D---- C:\WINDOWS\system32\el-GR
2015-08-09 17:58:51 ----D---- C:\WINDOWS\system32\de-DE
2015-08-09 17:58:51 ----D---- C:\WINDOWS\system32\da-DK
2015-08-09 17:58:01 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-09 17:57:57 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2015-08-09 17:57:57 ----D---- C:\WINDOWS\system32\appmgmt
2015-08-09 17:57:50 ----D---- C:\WINDOWS\schemas
2015-08-09 17:57:50 ----D---- C:\WINDOWS\PolicyDefinitions
2015-08-09 17:57:49 ----D---- C:\WINDOWS\LiveKernelReports
2015-08-09 17:57:44 ----RSD---- C:\WINDOWS\Fonts
2015-08-09 17:57:44 ----D---- C:\WINDOWS\Help
2015-08-09 17:57:43 ----D---- C:\WINDOWS\ehome
2015-08-09 17:57:31 ----SHD---- C:\Program Files\Windows Sidebar
2015-08-09 17:57:31 ----D---- C:\Program Files\Windows Mail
2015-08-09 17:57:29 ----D---- C:\Program Files\Microsoft.NET
2015-08-09 17:57:27 ----D---- C:\Program Files\DVD Maker
2015-08-09 17:57:27 ----D---- C:\Program Files\Common Files\System
2015-08-09 17:57:27 ----AD---- C:\Program Files\Common Files\microsoft shared
2015-08-09 17:56:38 ----D---- C:\WINDOWS\system32\Recovery
2015-08-09 17:53:11 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-08 17:38:46 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 74240]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 7680]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 37376]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 52736]
R3 b57nd60x;@netb57vx.inf,%SvcDispName%;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\b57nd60x.sys [2015-07-10 401408]
R3 guardian2;guardian2; C:\WINDOWS\System32\Drivers\oz776.sys [2015-08-09 72184]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-09 130048]
R3 netwlv32; Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\WINDOWS\System32\drivers\netwlv32.sys [2015-07-10 6637056]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-06-29 10704072]
R3 SrvHsfHDA;SrvHsfHDA; C:\WINDOWS\system32\DRIVERS\VSTAZL3.SYS [2015-07-10 207360]
R3 SrvHsfV92;SrvHsfV92; C:\WINDOWS\system32\DRIVERS\VSTDPV3.SYS [2015-07-10 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\WINDOWS\system32\DRIVERS\VSTCNXT3.SYS [2015-07-10 661504]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 83296]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 33632]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 23552]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 96768]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 24064]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-07-10 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 37728]
S3 HTCAND32;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-10-27 25088]
S3 HtcVCom32;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV32.sys [2009-10-27 105984]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-07-10 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 23040]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 45056]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-09 32768]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 31744]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 190816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 73568]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 100704]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 42848]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 21856]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 21856]
S3 USBAAPL;@oem7.inf,%USBAAPL.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2015-06-10 45056]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-08-09 48128]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\WINDOWS\System32\drivers\vhf.sys [2015-07-10 24064]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 60744]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-09 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-06-29 670536]
R2 NVWMI;NVIDIA WMI Provider; C:\Windows\system32\nvwmi.exe [2013-09-05 1027872]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 SSFK;SSFK; C:\Program Files\SFK\SSFK.exe [2015-08-31 448000]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-16 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 23040]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-05-29 43696]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-02-13 136120]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-07-11 541992]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-28 149160]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 41864]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-09 669696]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-07-10 45240]
-----------------EOF-----------------