Preventivka
Napsal: 10 zář 2015 12:26
Zdravím, prosím koukněte se někdo na tento log, PC si nemyslím že funguje nějak špatně, jen mi přijde, že je spuštěno až příliš procesů. Tak jestli tam není nějaká havěť. Předem díky 
Logfile of random's system information tool 1.10 (written by random/random)
Run by Myrra at 2015-09-10 13:14:43
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 183 GB (38%) free of 477 GB
Total RAM: 4061 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:14:49, on 10.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\TiltWheelMouse.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe
C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Myrra.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [THX TruStudio NB Settings] "C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\ASRock\XFast LAN\spd.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9675 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
taskeng.exe {8937425B-1B98-48B2-8E8E-E22477F52C66}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ASRock\XFast LAN\cfosspeed.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\SysWOW64\ASGT.exe
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Windows\System32\TiltWheelMouse.exe"
"C:\Program Files\ASRock\XFast LAN\spd.exe" -service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" /r
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 7ee691e9-04f0-4af2-9c4f-f206df33c609
\??\C:\Windows\system32\conhost.exe "9965860981843507819457746040-11248325291203967930-4972867814842848661465606491
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
\??\C:\Windows\system32\conhost.exe "-1792055075-89389739534967769-582412216-336607542-1106434283-10653042341272577692
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\Myrra\AppData\Local\Steam\htmlcache" -steampid 2796 -buildid 1440016726 -steamid "0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --font-cache-shared-mem-suffix=4960 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-gpu-compositing --channel="4960.0.2134742599\356211727" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5904.0.1218856149\1585329856" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5560 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.2.240189436\2066171596" --font-cache-shared-handle=2072 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.6.1190662175\2010328765" --font-cache-shared-handle=5576 /prefetch:673131151
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
taskhost.exe $(Arg0)
"C:\Users\Myrra\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.9.763122212\455679146" --font-cache-shared-handle=4704 /prefetch:673131151
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-10-17 13307496]
"XFast LAN"=C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [2011-10-19 1441152]
"THXCfg64"=C:\Windows\system32\THXCfg64.dll [2011-05-13 26624]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-18 2634872]
"MouseDriver"=C:\Windows\system32\TiltWheelMouse.exe [2012-12-19 241152]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-08-18 1710568]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ASRockXTU"= []
"zASRockInstantBoot"= []
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-08-19 2899136]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2012-10-18 752736]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"THX TruStudio NB Settings"=C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [2011-05-19 909824]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-09-01 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-10 13:14:43 ----D---- C:\rsit
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 10:42:39 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 10:42:39 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 10:42:38 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 10:42:38 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 10:42:27 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 10:42:27 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 10:42:26 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 10:42:26 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 10:42:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 10:42:22 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 10:42:10 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 10:42:10 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 10:42:10 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 10:42:10 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 10:42:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 10:42:08 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 10:42:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 10:42:05 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 10:42:05 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 10:42:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 10:42:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 10:42:03 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 10:42:03 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 10:42:03 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 10:42:03 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 10:42:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 10:42:02 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 10:42:02 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 10:42:01 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 10:41:59 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 10:41:59 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 10:41:59 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 10:41:56 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 10:41:56 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 10:41:55 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 10:40:00 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 10:40:00 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 10:39:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 10:39:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 10:39:57 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 10:39:57 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 10:39:57 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 10:39:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 10:39:56 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 10:39:56 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 10:39:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 10:39:55 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 10:39:54 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 10:39:54 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\smss.exe
2015-09-09 10:39:53 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 10:39:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 10:39:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 10:39:53 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 10:39:52 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 10:39:51 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 10:39:51 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 10:39:50 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 10:39:50 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 10:39:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 10:39:49 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 10:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 10:39:01 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 10:39:01 ----A---- C:\Windows\system32\consent.exe
2015-09-09 10:39:01 ----A---- C:\Windows\system32\authui.dll
2015-09-09 10:39:01 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 10:38:55 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 10:38:55 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 10:38:55 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 10:38:54 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 10:38:53 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 10:38:53 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 10:38:52 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 10:38:52 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 10:38:52 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 10:38:51 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 10:38:51 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 10:38:02 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 10:38:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 10:38:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-09 10:38:00 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 10:38:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 10:37:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 10:37:59 ----A---- C:\Windows\system32\wups.dll
2015-09-09 10:37:59 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-23 23:35:36 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvopencl.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvoglv64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvinitx.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\NvIFR64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\NvFBC64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-08-23 23:31:32 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-08-23 23:31:32 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvdispgenco6435560.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvdispco6435560.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvcuvid.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvcuda.dll
2015-08-23 23:31:27 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-08-23 23:31:27 ----A---- C:\Windows\system32\nvcompiler.dll
2015-08-23 22:47:53 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-08-23 22:47:52 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-08-22 17:08:25 ----D---- C:\ProgramData\Package Cache
2015-08-22 16:55:10 ----AD---- C:\ProgramData\TEMP
2015-08-15 10:44:42 ----A---- C:\Windows\system32\sysmain.dll
2015-08-15 10:44:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-15 10:44:40 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-15 02:07:39 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-15 02:07:39 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\generaltel.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\devinv.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\appraiser.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\acmigration.dll
2015-08-15 00:01:21 ----A---- C:\Windows\system32\invagent.dll
2015-08-15 00:01:21 ----A---- C:\Windows\system32\aeinv.dll
2015-08-15 00:01:20 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-15 00:01:20 ----A---- C:\Windows\system32\aepdu.dll
2015-08-15 00:01:18 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-15 00:01:18 ----A---- C:\Windows\system32\mstscax.dll
2015-08-15 00:01:17 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-15 00:01:17 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-08-15 00:01:17 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-15 00:01:17 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-08-15 00:01:16 ----A---- C:\Windows\system32\wksprt.exe
2015-08-14 23:54:02 ----A---- C:\Windows\system32\basesrv.dll
2015-08-14 23:48:51 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\system32\davclnt.dll
2015-08-14 23:48:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-14 23:48:41 ----A---- C:\Windows\system32\FntCache.dll
2015-08-14 23:48:41 ----A---- C:\Windows\system32\DWrite.dll
2015-08-14 23:48:37 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-14 23:48:37 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-14 23:48:31 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-14 23:48:31 ----A---- C:\Windows\system32\notepad.exe
2015-08-14 23:48:31 ----A---- C:\Windows\notepad.exe
2015-08-14 23:48:25 ----A---- C:\Windows\system32\shell32.dll
2015-08-14 23:48:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
======List of files/folders modified in the last 1 month======
2015-09-10 13:14:49 ----D---- C:\Windows\Prefetch
2015-09-10 13:14:48 ----D---- C:\Windows\Temp
2015-09-10 13:14:45 ----D---- C:\Program Files\trend micro
2015-09-10 11:42:24 ----D---- C:\Windows\System32
2015-09-10 11:42:24 ----D---- C:\Windows\inf
2015-09-10 11:42:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-10 10:41:40 ----D---- C:\Program Files (x86)\Steam
2015-09-10 10:14:27 ----D---- C:\Users\Myrra\AppData\Roaming\uTorrent
2015-09-10 09:20:36 ----D---- C:\Windows\system32\config
2015-09-10 09:18:22 ----D---- C:\Windows\system32\Tasks
2015-09-10 09:18:02 ----D---- C:\Windows\SYSWOW64\drivers
2015-09-10 09:16:49 ----D---- C:\ProgramData\NVIDIA
2015-09-09 23:49:22 ----D---- C:\Windows\Microsoft.NET
2015-09-09 23:36:55 ----RSD---- C:\Windows\assembly
2015-09-09 22:21:20 ----D---- C:\Windows\winsxs
2015-09-09 22:18:43 ----D---- C:\Windows\SysWOW64
2015-09-09 22:18:43 ----D---- C:\Program Files\Windows Journal
2015-09-09 22:18:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-09 22:18:42 ----D---- C:\Windows\system32\cs-CZ
2015-09-09 22:18:42 ----D---- C:\Windows\ehome
2015-09-09 22:18:41 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-09 22:18:41 ----D---- C:\Program Files\Internet Explorer
2015-09-09 22:18:40 ----D---- C:\Windows\system32\en-US
2015-09-09 22:18:40 ----D---- C:\Windows\PolicyDefinitions
2015-09-09 22:18:37 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-09 22:18:34 ----D---- C:\Windows\system32\drivers
2015-09-09 22:18:34 ----D---- C:\Windows\AppPatch
2015-09-09 22:18:32 ----D---- C:\Windows\system32\Boot
2015-09-09 14:39:35 ----SHD---- C:\Windows\Installer
2015-09-09 14:38:28 ----D---- C:\ProgramData\Microsoft Help
2015-09-09 14:33:27 ----D---- C:\Windows\system32\MRT
2015-09-09 14:24:52 ----SHD---- C:\System Volume Information
2015-09-09 10:37:48 ----D---- C:\Windows\system32\catroot2
2015-09-02 01:11:37 ----D---- C:\Windows\system32\NDF
2015-08-28 13:12:21 ----RD---- C:\Program Files (x86)
2015-08-28 13:12:17 ----D---- C:\Windows\Tasks
2015-08-26 18:37:02 ----A---- C:\Windows\system32\MRT.exe
2015-08-24 11:21:25 ----SD---- C:\Users\Myrra\AppData\Roaming\Microsoft
2015-08-24 11:21:25 ----D---- C:\Windows\system32\appmgmt
2015-08-24 09:47:26 ----D---- C:\Windows
2015-08-23 23:36:10 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-23 23:35:32 ----D---- C:\Windows\system32\DriverStore
2015-08-22 17:22:00 ----D---- C:\Users\Myrra\AppData\Roaming\Natural Selection 2
2015-08-22 17:08:25 ----HD---- C:\ProgramData
2015-08-22 16:41:08 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-08-22 16:34:49 ----D---- C:\ProgramData\Origin
2015-08-20 23:54:34 ----D---- C:\Windows\rescache
2015-08-18 01:30:08 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-08-18 01:30:08 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-08-18 01:29:44 ----A---- C:\Windows\system32\nvspcap64.dll
2015-08-18 01:29:44 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-08-16 22:42:58 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-15 10:09:31 ----SD---- C:\Windows\system32\CompatTel
2015-08-15 10:09:31 ----D---- C:\Windows\system32\appraiser
2015-08-11 15:15:49 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2015-08-11 15:13:24 ----D---- C:\Users\Myrra\AppData\Roaming\Origin
2015-08-11 15:11:50 ----D---- C:\Program Files (x86)\Origin
2015-08-11 06:52:30 ----A---- C:\Windows\system32\nvaudcap64v.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-12-12 82048]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-12-12 42624]
R0 AsrRamDisk;AsrRamDisk; C:\Windows\system32\DRIVERS\AsrRamDisk.sys [2012-01-13 31016]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AsrAppCharger;AsrAppCharger; C:\Windows\system32\DRIVERS\AsrAppCharger.sys [2011-05-10 17192]
R1 cFosSpeed;cFosSpeed for faster Internet connections (NDIS 6); C:\Windows\system32\DRIVERS\cfosspeed6.sys [2011-07-04 1632128]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R3 AxtuDrv;AxtuDrv; \??\C:\Windows\SysWOW64\Drivers\AxtuDrv.sys []
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-02-19 59392]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-02-19 84608]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-10-18 2957544]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-06-17 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-18 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-04-21 471144]
R3 RTL8192cu;TP-LINK 150Mbps Wireless N Nano USB Adapter; C:\Windows\system32\DRIVERS\RTL8192cu.sys [2012-03-14 926824]
R3 RTL85n64;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver; C:\Windows\system32\DRIVERS\RTL85n64.sys [2009-06-10 378368]
R3 t_mouse.sys;HID-compliand device; C:\Windows\system32\DRIVERS\t_mouse.sys [2012-12-19 6144]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2011-12-13 56448]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-07-28 54784]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-08-28 43336]
R2 ASGT;ASGT; C:\Windows\SysWOW64\ASGT.exe [2012-01-17 55296]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 cFosSpeedS;cFosSpeed System Service; C:\Program Files\ASRock\XFast LAN\spd.exe [2011-10-19 395136]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-18 1155192]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-18 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-18 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-07 937592]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-10-17 76152]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-07 410744]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-09-01 640840]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-08-13 477960]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-08-11 2007048]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-08-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Logfile of random's system information tool 1.10 (written by random/random)
Run by Myrra at 2015-09-10 13:14:43
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 183 GB (38%) free of 477 GB
Total RAM: 4061 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:14:49, on 10.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\TiltWheelMouse.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe
C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Myrra.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [THX TruStudio NB Settings] "C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\ASRock\XFast LAN\spd.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9675 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
taskeng.exe {8937425B-1B98-48B2-8E8E-E22477F52C66}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ASRock\XFast LAN\cfosspeed.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\SysWOW64\ASGT.exe
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Windows\System32\TiltWheelMouse.exe"
"C:\Program Files\ASRock\XFast LAN\spd.exe" -service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" /r
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 7ee691e9-04f0-4af2-9c4f-f206df33c609
\??\C:\Windows\system32\conhost.exe "9965860981843507819457746040-11248325291203967930-4972867814842848661465606491
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
\??\C:\Windows\system32\conhost.exe "-1792055075-89389739534967769-582412216-336607542-1106434283-10653042341272577692
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\Myrra\AppData\Local\Steam\htmlcache" -steampid 2796 -buildid 1440016726 -steamid "0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --font-cache-shared-mem-suffix=4960 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-gpu-compositing --channel="4960.0.2134742599\356211727" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5904.0.1218856149\1585329856" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5560 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.2.240189436\2066171596" --font-cache-shared-handle=2072 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.6.1190662175\2010328765" --font-cache-shared-handle=5576 /prefetch:673131151
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
taskhost.exe $(Arg0)
"C:\Users\Myrra\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_27/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="5904.9.763122212\455679146" --font-cache-shared-handle=4704 /prefetch:673131151
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-10-17 13307496]
"XFast LAN"=C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [2011-10-19 1441152]
"THXCfg64"=C:\Windows\system32\THXCfg64.dll [2011-05-13 26624]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-18 2634872]
"MouseDriver"=C:\Windows\system32\TiltWheelMouse.exe [2012-12-19 241152]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-08-18 1710568]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ASRockXTU"= []
"zASRockInstantBoot"= []
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-08-19 2899136]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2012-10-18 752736]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"THX TruStudio NB Settings"=C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [2011-05-19 909824]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-09-01 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-10 13:14:43 ----D---- C:\rsit
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 10:42:40 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 10:42:39 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 10:42:39 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 10:42:38 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 10:42:38 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 10:42:27 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 10:42:27 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 10:42:26 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 10:42:26 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 10:42:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 10:42:22 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 10:42:10 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 10:42:10 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 10:42:10 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 10:42:10 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 10:42:08 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 10:42:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 10:42:08 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 10:42:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 10:42:07 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 10:42:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 10:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 10:42:05 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 10:42:05 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 10:42:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 10:42:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 10:42:03 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 10:42:03 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 10:42:03 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 10:42:03 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 10:42:03 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 10:42:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 10:42:02 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 10:42:02 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 10:42:01 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 10:42:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 10:42:00 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 10:41:59 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 10:41:59 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 10:41:59 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 10:41:58 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 10:41:57 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 10:41:56 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 10:41:56 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 10:41:55 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 10:40:00 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 10:40:00 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 10:39:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 10:39:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 10:39:57 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 10:39:57 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 10:39:57 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 10:39:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 10:39:56 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 10:39:56 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 10:39:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 10:39:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 10:39:55 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 10:39:54 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 10:39:54 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 10:39:54 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 10:39:53 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\smss.exe
2015-09-09 10:39:53 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 10:39:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 10:39:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 10:39:53 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 10:39:53 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 10:39:52 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 10:39:52 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 10:39:51 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 10:39:51 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 10:39:51 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 10:39:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 10:39:50 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 10:39:50 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 10:39:50 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 10:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 10:39:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 10:39:49 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 10:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 10:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 10:39:47 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 10:39:47 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 10:39:01 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 10:39:01 ----A---- C:\Windows\system32\consent.exe
2015-09-09 10:39:01 ----A---- C:\Windows\system32\authui.dll
2015-09-09 10:39:01 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 10:38:55 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 10:38:55 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 10:38:55 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 10:38:54 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 10:38:54 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 10:38:53 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 10:38:53 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 10:38:52 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 10:38:52 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 10:38:52 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 10:38:51 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 10:38:51 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 10:38:51 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 10:38:02 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 10:38:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 10:38:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 10:38:01 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-09 10:38:00 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 10:38:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 10:38:00 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 10:37:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 10:37:59 ----A---- C:\Windows\system32\wups.dll
2015-09-09 10:37:59 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-23 23:35:36 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-08-23 23:31:33 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvopencl.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvoglv64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\nvinitx.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\NvIFR64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\NvFBC64.dll
2015-08-23 23:31:33 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-08-23 23:31:32 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-08-23 23:31:32 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvdispgenco6435560.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvdispco6435560.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvcuvid.dll
2015-08-23 23:31:32 ----A---- C:\Windows\system32\nvcuda.dll
2015-08-23 23:31:27 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-08-23 23:31:27 ----A---- C:\Windows\system32\nvcompiler.dll
2015-08-23 22:47:53 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-08-23 22:47:52 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-08-22 17:08:25 ----D---- C:\ProgramData\Package Cache
2015-08-22 16:55:10 ----AD---- C:\ProgramData\TEMP
2015-08-15 10:44:42 ----A---- C:\Windows\system32\sysmain.dll
2015-08-15 10:44:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-15 10:44:40 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-15 02:07:39 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-15 02:07:39 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\generaltel.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\devinv.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\appraiser.dll
2015-08-15 00:01:22 ----A---- C:\Windows\system32\acmigration.dll
2015-08-15 00:01:21 ----A---- C:\Windows\system32\invagent.dll
2015-08-15 00:01:21 ----A---- C:\Windows\system32\aeinv.dll
2015-08-15 00:01:20 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-15 00:01:20 ----A---- C:\Windows\system32\aepdu.dll
2015-08-15 00:01:18 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-15 00:01:18 ----A---- C:\Windows\system32\mstscax.dll
2015-08-15 00:01:17 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-15 00:01:17 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-08-15 00:01:17 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-15 00:01:17 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-08-15 00:01:16 ----A---- C:\Windows\system32\wksprt.exe
2015-08-14 23:54:02 ----A---- C:\Windows\system32\basesrv.dll
2015-08-14 23:48:51 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-14 23:48:51 ----A---- C:\Windows\system32\davclnt.dll
2015-08-14 23:48:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-14 23:48:41 ----A---- C:\Windows\system32\FntCache.dll
2015-08-14 23:48:41 ----A---- C:\Windows\system32\DWrite.dll
2015-08-14 23:48:37 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-14 23:48:37 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-14 23:48:31 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-14 23:48:31 ----A---- C:\Windows\system32\notepad.exe
2015-08-14 23:48:31 ----A---- C:\Windows\notepad.exe
2015-08-14 23:48:25 ----A---- C:\Windows\system32\shell32.dll
2015-08-14 23:48:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
======List of files/folders modified in the last 1 month======
2015-09-10 13:14:49 ----D---- C:\Windows\Prefetch
2015-09-10 13:14:48 ----D---- C:\Windows\Temp
2015-09-10 13:14:45 ----D---- C:\Program Files\trend micro
2015-09-10 11:42:24 ----D---- C:\Windows\System32
2015-09-10 11:42:24 ----D---- C:\Windows\inf
2015-09-10 11:42:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-10 10:41:40 ----D---- C:\Program Files (x86)\Steam
2015-09-10 10:14:27 ----D---- C:\Users\Myrra\AppData\Roaming\uTorrent
2015-09-10 09:20:36 ----D---- C:\Windows\system32\config
2015-09-10 09:18:22 ----D---- C:\Windows\system32\Tasks
2015-09-10 09:18:02 ----D---- C:\Windows\SYSWOW64\drivers
2015-09-10 09:16:49 ----D---- C:\ProgramData\NVIDIA
2015-09-09 23:49:22 ----D---- C:\Windows\Microsoft.NET
2015-09-09 23:36:55 ----RSD---- C:\Windows\assembly
2015-09-09 22:21:20 ----D---- C:\Windows\winsxs
2015-09-09 22:18:43 ----D---- C:\Windows\SysWOW64
2015-09-09 22:18:43 ----D---- C:\Program Files\Windows Journal
2015-09-09 22:18:42 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-09 22:18:42 ----D---- C:\Windows\system32\cs-CZ
2015-09-09 22:18:42 ----D---- C:\Windows\ehome
2015-09-09 22:18:41 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-09 22:18:41 ----D---- C:\Program Files\Internet Explorer
2015-09-09 22:18:40 ----D---- C:\Windows\system32\en-US
2015-09-09 22:18:40 ----D---- C:\Windows\PolicyDefinitions
2015-09-09 22:18:37 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-09 22:18:34 ----D---- C:\Windows\system32\drivers
2015-09-09 22:18:34 ----D---- C:\Windows\AppPatch
2015-09-09 22:18:32 ----D---- C:\Windows\system32\Boot
2015-09-09 14:39:35 ----SHD---- C:\Windows\Installer
2015-09-09 14:38:28 ----D---- C:\ProgramData\Microsoft Help
2015-09-09 14:33:27 ----D---- C:\Windows\system32\MRT
2015-09-09 14:24:52 ----SHD---- C:\System Volume Information
2015-09-09 10:37:48 ----D---- C:\Windows\system32\catroot2
2015-09-02 01:11:37 ----D---- C:\Windows\system32\NDF
2015-08-28 13:12:21 ----RD---- C:\Program Files (x86)
2015-08-28 13:12:17 ----D---- C:\Windows\Tasks
2015-08-26 18:37:02 ----A---- C:\Windows\system32\MRT.exe
2015-08-24 11:21:25 ----SD---- C:\Users\Myrra\AppData\Roaming\Microsoft
2015-08-24 11:21:25 ----D---- C:\Windows\system32\appmgmt
2015-08-24 09:47:26 ----D---- C:\Windows
2015-08-23 23:36:10 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-23 23:35:32 ----D---- C:\Windows\system32\DriverStore
2015-08-22 17:22:00 ----D---- C:\Users\Myrra\AppData\Roaming\Natural Selection 2
2015-08-22 17:08:25 ----HD---- C:\ProgramData
2015-08-22 16:41:08 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-08-22 16:34:49 ----D---- C:\ProgramData\Origin
2015-08-20 23:54:34 ----D---- C:\Windows\rescache
2015-08-18 01:30:08 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-08-18 01:30:08 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-08-18 01:29:44 ----A---- C:\Windows\system32\nvspcap64.dll
2015-08-18 01:29:44 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-08-16 22:42:58 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-15 10:09:31 ----SD---- C:\Windows\system32\CompatTel
2015-08-15 10:09:31 ----D---- C:\Windows\system32\appraiser
2015-08-11 15:15:49 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2015-08-11 15:13:24 ----D---- C:\Users\Myrra\AppData\Roaming\Origin
2015-08-11 15:11:50 ----D---- C:\Program Files (x86)\Origin
2015-08-11 06:52:30 ----A---- C:\Windows\system32\nvaudcap64v.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-12-12 82048]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-12-12 42624]
R0 AsrRamDisk;AsrRamDisk; C:\Windows\system32\DRIVERS\AsrRamDisk.sys [2012-01-13 31016]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AsrAppCharger;AsrAppCharger; C:\Windows\system32\DRIVERS\AsrAppCharger.sys [2011-05-10 17192]
R1 cFosSpeed;cFosSpeed for faster Internet connections (NDIS 6); C:\Windows\system32\DRIVERS\cfosspeed6.sys [2011-07-04 1632128]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R3 AxtuDrv;AxtuDrv; \??\C:\Windows\SysWOW64\Drivers\AxtuDrv.sys []
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-02-19 59392]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-02-19 84608]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-10-18 2957544]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-06-17 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-18 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-04-21 471144]
R3 RTL8192cu;TP-LINK 150Mbps Wireless N Nano USB Adapter; C:\Windows\system32\DRIVERS\RTL8192cu.sys [2012-03-14 926824]
R3 RTL85n64;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver; C:\Windows\system32\DRIVERS\RTL85n64.sys [2009-06-10 378368]
R3 t_mouse.sys;HID-compliand device; C:\Windows\system32\DRIVERS\t_mouse.sys [2012-12-19 6144]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2011-12-13 56448]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 73984]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-07-28 54784]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-08-28 43336]
R2 ASGT;ASGT; C:\Windows\SysWOW64\ASGT.exe [2012-01-17 55296]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 cFosSpeedS;cFosSpeed System Service; C:\Program Files\ASRock\XFast LAN\spd.exe [2011-10-19 395136]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-18 1155192]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-18 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-18 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-07 937592]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-10-17 76152]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-07 410744]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-09-01 640840]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-08-13 477960]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-08-11 2007048]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-08-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
