Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pros9m o kontrolu děkuji

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Snake.d
Návštěvník
Návštěvník
Příspěvky: 66
Registrován: 31 led 2007 11:54

Pros9m o kontrolu děkuji

#1 Příspěvek od Snake.d »

Logfile of random's system information tool 1.10 (written by random/random)
Run by snake.d at 2015-10-06 07:38:22
Microsoft Windows 10 Pro
System drive C: has 41 GB (35%) free of 119 GB
Total RAM: 4095 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:38:28, on 6.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamresearch.exe
C:\Program Files\trend micro\snake.d.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {6d010537-9e99-400b-b652-b0d5a5757e5d} - (no file)
F2 - REG:system.ini: UserInit=
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {d9f16d8b-81b5-4667-af4d-25365bbf7fc9} - (no file)
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [WindowsApplication5] C:\Users\Public\Documents\WindowsApplication5.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HiSuiteOuc64.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nHancer Support (nHancer) - KSE - Korndörfer Software Engineering - C:\Program Files\nHancer\nHancerService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Saitek DirectOutput (SaiDOutput) - Saitek - C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11907 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-808e9ce9-e18e-4a03-9784-f64336a9b59d -SystemEventPortName:HostProcess-751a71f9-6912-43cb-b771-4160e9f839b7 -IoCancelEventPortName:HostProcess-fe72482d-bbe8-43a7-ad52-06118f92c264 -NonStateChangingEventPortName:HostProcess-54337946-8077-46c7-898b-044528cf5adb -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ceb5c8cf-b5a7-453c-9f5b-61fe1572d921 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {09862932-4bb8-4cc7-9b3ff1d74588a643}
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\mqsvc.exe
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files\nHancer\nHancerService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
C:\WINDOWS\system32\svchost.exe -k SDRSVC


C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
ATKOSD.exe
sihost.exe
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"fontdrvhost.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\Opera x64\opera.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe"
mbamresearch.exe
"C:\Users\snake.d\AppData\Local\Opera\Opera x64\temporary_downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d9f16d8b-81b5-4667-af4d-25365bbf7fc9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-20 1815848]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-07-08 5595848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-21 405584]
"WindowsApplication5"=C:\Users\Public\Documents\WindowsApplication5.exe [2015-10-01 29184]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2015-06-29 6783304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-10-01 14040792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunDLLEntry]
C:\Windows\system32\AmbRunE.dll [2009-02-26 17920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TMMonitor.lnk - C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
"C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe"="C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe:*:Enabled:Daum PotPlayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.CFHD"=CFHD.dll
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-06 07:38:22 ----D---- C:\rsit
2015-10-06 07:38:22 ----D---- C:\Program Files\trend micro
2015-10-06 07:35:13 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-10-06 07:35:02 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-01 11:06:46 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-01 11:06:44 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 11:06:42 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-01 11:06:40 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-01 11:06:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-01 11:06:36 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-01 11:06:31 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-01 11:06:31 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 11:06:30 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 11:06:29 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 11:06:28 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-01 11:06:27 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-01 11:06:27 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 11:06:20 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-01 11:06:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 11:06:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-01 11:06:16 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-01 11:06:16 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 11:06:15 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 11:05:59 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 10:53:14 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-10-01 10:53:14 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2015-10-01 10:46:25 ----D---- C:\Users\snake.d\AppData\Roaming\ProductData
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2015-10-01 10:35:02 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\SYSWOW64\MBAPO32.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBppld64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBPPCn64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBAPO64.dll
2015-10-01 10:34:58 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-10-01 10:34:57 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-10-01 10:34:55 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2015-10-01 10:34:53 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2015-09-22 09:29:35 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-09-21 21:22:24 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-21 21:22:24 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-21 21:22:22 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-21 21:22:21 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-21 21:22:20 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-21 21:22:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-21 21:22:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-21 21:22:14 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-21 21:22:14 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-21 21:22:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-21 21:22:11 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-21 21:22:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-21 21:22:11 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-21 21:22:11 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-21 21:22:10 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-21 21:22:10 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-09-10 22:40:11 ----D---- C:\WINDOWS\Minidump
2015-09-07 17:08:19 ----D---- C:\Users\snake.d\AppData\Roaming\ArcSoft
2015-09-07 17:08:16 ----A---- C:\WINDOWS\SYSWOW64\drivers\afc.sys
2015-09-07 17:07:32 ----D---- C:\Program Files (x86)\MSI
2015-09-07 17:07:32 ----A---- C:\WINDOWS\SYSWOW64\unicows.dll
2015-09-07 17:05:11 ----D---- C:\WINDOWS\SYSWOW64\DRVSTORE
2015-09-07 17:05:09 ----A---- C:\WINDOWS\system32\drivers\AF15BDA.sys
2015-09-07 17:05:09 ----A---- C:\WINDOWS\system32\AF15BDAEX.dll

======List of files/folders modified in the last 1 month======

2015-10-06 07:38:22 ----RD---- C:\Program Files
2015-10-06 07:38:19 ----D---- C:\WINDOWS\Temp
2015-10-06 07:35:13 ----D---- C:\WINDOWS\system32\drivers
2015-10-06 07:35:02 ----RD---- C:\Program Files (x86)
2015-10-06 07:29:33 ----D---- C:\WINDOWS\System32
2015-10-06 07:27:02 ----D---- C:\WINDOWS\Prefetch
2015-10-06 07:23:23 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-06 07:22:59 ----D---- C:\WINDOWS\AppReadiness
2015-10-06 07:21:12 ----D---- C:\WINDOWS\system32\config
2015-10-06 07:20:28 ----D---- C:\WINDOWS\system32\sru
2015-10-05 20:20:56 ----D---- C:\WINDOWS\CbsTemp
2015-10-05 20:16:56 ----D---- C:\WINDOWS\INF
2015-10-05 20:16:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-05 20:13:24 ----A---- C:\WINDOWS\system32\ServiceFilter.ini
2015-10-05 20:13:16 ----D---- C:\WINDOWS\WinSxS
2015-10-05 20:13:12 ----D---- C:\WINDOWS\SysWOW64
2015-10-05 17:05:16 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-05 17:05:16 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-05 17:05:11 ----SD---- C:\WINDOWS\system32\F12
2015-10-05 17:05:11 ----D---- C:\WINDOWS\system32\migration
2015-10-05 17:05:11 ----D---- C:\WINDOWS\system32\appraiser
2015-10-05 17:05:00 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-05 17:05:00 ----D---- C:\WINDOWS\Provisioning
2015-10-05 17:04:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-05 17:04:59 ----D---- C:\WINDOWS\AppPatch
2015-10-05 17:04:58 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-05 14:04:20 ----SHD---- C:\System Volume Information
2015-10-05 10:30:18 ----RSD---- C:\WINDOWS\assembly
2015-10-05 10:18:06 ----HD---- C:\Program Files\WindowsApps
2015-10-01 10:54:30 ----D---- C:\WINDOWS\system32\catroot2
2015-10-01 10:53:14 ----HD---- C:\ProgramData
2015-10-01 10:51:26 ----D---- C:\WINDOWS\system32\Tasks
2015-10-01 10:51:26 ----D---- C:\Program Files (x86)\Opera
2015-10-01 10:45:17 ----D---- C:\Windows
2015-10-01 10:44:46 ----D---- C:\WINDOWS\debug
2015-10-01 10:42:14 ----D---- C:\Program Files\Windows Journal
2015-10-01 10:41:30 ----D---- C:\AdwCleaner
2015-10-01 10:39:02 ----D---- C:\Program Files (x86)\IObit
2015-10-01 10:37:13 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-01 10:35:58 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBWrp64.dll
2015-10-01 10:18:28 ----D---- C:\Program Files\CCleaner
2015-09-24 16:43:41 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-22 09:43:01 ----SHD---- C:\WINDOWS\Installer
2015-09-22 09:43:01 ----SHD---- C:\Config.Msi
2015-09-22 09:31:43 ----D---- C:\ProgramData\Microsoft Help
2015-09-22 09:29:11 ----D---- C:\WINDOWS\system32\MRT
2015-09-21 08:38:44 ----D---- C:\WINDOWS\Tasks
2015-09-15 18:12:10 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-09-10 20:48:24 ----D---- C:\Windows.old
2015-09-09 09:06:50 ----A---- C:\WINDOWS\system32\AutoRunFilter.ini
2015-09-07 17:08:16 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-09-07 17:08:08 ----D---- C:\Program Files (x86)\Common Files
2015-09-07 17:07:29 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\WINDOWS\system32\drivers\AsDsm.sys [2014-12-08 35384]
R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2015-07-14 251632]
R0 iaStor;@oem9.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2009-06-04 408600]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-01-01 26528]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2015-07-14 168208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmpx64.sys [2009-06-26 67584]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimssn64.sys [2015-05-10 86528]
R2 risdptsk;risdptsk; C:\WINDOWS\System32\drivers\risdsn64.sys [2015-05-10 76288]
R2 rismxdp;@oem43.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdpx64.sys [2009-06-26 57856]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-09-18 22784]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-10-01 4514008]
R3 itecir;@oem41.inf,%itecir.SVCDESC%;ITECIR Infrared Receiver; C:\WINDOWS\system32\DRIVERS\itecir.sys [2015-01-01 69736]
R3 ITECIRfilter;@oem41.inf,%filter.SvcDesc%;ITECIR Filter Driver; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [2015-01-01 28264]
R3 kbfiltr;@oem28.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2009-07-20 15416]
R3 MarvinBus;@oem30.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-23 261120]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2015-10-06 113880]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-07 175104]
R3 MTsensor;@oem42.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATK64AMD.sys [2009-05-13 15928]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\WINDOWS\System32\drivers\NETwsw00.sys [2015-03-09 11530144]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-06-29 12896400]
R3 rt640x64;@oem17.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-01 888064]
R3 SaiMini;SaiMini; C:\WINDOWS\System32\drivers\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SynTP;@oem52.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-07-20 274480]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2015-04-06 834544]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 AF15BDA;@oem5.inf,%AF15BDA.FriendlyName%;AF9015 BDA Filter; C:\WINDOWS\System32\Drivers\AF15BDA.sys [2006-09-28 362624]
S3 bcbtums;@oem63.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 170712]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-08-20 929280]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
S3 btwampfl;@oem63.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2014-12-13 21712]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw1v64.sys [2009-08-10 7058432]
S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-07 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem4.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-08-13 206080]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-09-17 359552]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BcmBtRSupport;@oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 2255064]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-07-08 1353720]
R2 HiSuiteOuc64.exe;HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [2014-09-05 138272]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [2014-09-05 219680]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-08-07 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-07 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nHancer;nHancer Support; C:\Program Files\nHancer\nHancerService.exe [2010-05-02 39424]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-06-29 932040]
R2 OneSyncSvc_Session2;Hostitel synchronizace_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 SaiDOutput;Saitek DirectOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [2014-07-30 233984]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2014-12-08 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2014-12-08 79360]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session2;Data kontaktů_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-07 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pros9m o kontrolu děkuji

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Snake.d
Návštěvník
Návštěvník
Příspěvky: 66
Registrován: 31 led 2007 11:54

Re: Pros9m o kontrolu děkuji

#3 Příspěvek od Snake.d »

Rudy píše:Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Díky moc za ujmutí...:-)

# AdwCleaner v4.203 - Log vytvořen 14/10/2015 v 21:07:23
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-10-13.2 [Server]
# Operační system : Windows 10 Pro (x64)
# Uživatelské jméno : snake.d - SNAKED-PC
# Spuštěno z : C:\Users\snake.d\Desktop\očista\adwcleaner_4.203.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\Megasoft Security

***** [ Naplánované úlohy ] *****

Úloha Smazáno : Megasoft Security Uninstaller

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.10240.16412


-\\ Mozilla Firefox v


-\\ Google Chrome v46.0.2490.71


-\\ Chromium v


-\\ Opera v32.0.1948.69


*************************

AdwCleaner[R0].txt - [4897 bytů] - [02/05/2015 21:47:53]
AdwCleaner[R1].txt - [1266 bytů] - [07/05/2015 21:33:19]
AdwCleaner[R2].txt - [2107 bytů] - [28/05/2015 09:36:48]
AdwCleaner[R3].txt - [9516 bytů] - [28/07/2015 16:58:35]
AdwCleaner[R4].txt - [1626 bytů] - [08/08/2015 09:18:50]
AdwCleaner[R5].txt - [1742 bytů] - [14/08/2015 14:52:40]
AdwCleaner[R6].txt - [1526 bytů] - [02/09/2015 10:37:57]
AdwCleaner[R7].txt - [1751 bytů] - [01/10/2015 10:39:20]
AdwCleaner[R8].txt - [2452 bytů] - [14/10/2015 21:05:37]
AdwCleaner[S0].txt - [4458 bytů] - [02/05/2015 21:49:32]
AdwCleaner[S1].txt - [1323 bytů] - [07/05/2015 21:41:20]
AdwCleaner[S2].txt - [1944 bytů] - [28/05/2015 09:39:04]
AdwCleaner[S3].txt - [8681 bytů] - [28/07/2015 17:01:17]
AdwCleaner[S4].txt - [1467 bytů] - [08/08/2015 09:20:33]
AdwCleaner[S5].txt - [1583 bytů] - [14/08/2015 15:07:41]
AdwCleaner[S6].txt - [1588 bytů] - [02/09/2015 10:56:47]
AdwCleaner[S7].txt - [1811 bytů] - [01/10/2015 10:41:27]
AdwCleaner[S8].txt - [2368 bytů] - [14/10/2015 21:07:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [2426 bytů] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pros9m o kontrolu děkuji

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Snake.d
Návštěvník
Návštěvník
Příspěvky: 66
Registrován: 31 led 2007 11:54

Re: Pros9m o kontrolu děkuji

#5 Příspěvek od Snake.d »

Rudy píše:Dejte nový log RSIT.
Logfile of random's system information tool 1.10 (written by random/random)
Run by snake.d at 2015-10-14 21:34:14
Microsoft Windows 10 Pro
System drive C: has 30 GB (25%) free of 119 GB
Total RAM: 4095 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:34:20, on 14.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\trend micro\snake.d.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {6d010537-9e99-400b-b652-b0d5a5757e5d} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {d9f16d8b-81b5-4667-af4d-25365bbf7fc9} - (no file)
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HiSuiteOuc64.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nHancer Support (nHancer) - KSE - Korndörfer Software Engineering - C:\Program Files\nHancer\nHancerService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Saitek DirectOutput (SaiDOutput) - Saitek - C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11956 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-74840b22-7683-4cdc-8664-bf26686f72be -SystemEventPortName:HostProcess-15ba6113-9d4b-4ab0-b304-d9e35dbb488f -IoCancelEventPortName:HostProcess-3c43e47a-164a-471d-99a9-b3b6033e2697 -NonStateChangingEventPortName:HostProcess-165dd9d3-d456-41e1-ad13-07a8bac4142e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:92eb7280-07a9-4c30-aa3c-cf89ce190938 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service
C:\WINDOWS\system32\mqsvc.exe
dashost.exe {824eaf31-b982-4576-9e55d034cba53b32}
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files\nHancer\nHancerService.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss a09acbe2-add9-4bea-894d-b905c9ab98bd 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe" -switch-3be2f036c43042cdb03588591c9325c3
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\P4G\BatteryLife.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe"
ATKOSD.exe
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe"
KBFiltr.exe
WDC.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\WINDOWS\system32\svchost.exe -k SDRSVC
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.13571.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\Opera x64\Opera.exe" "http://forum.viry.cz/viewtopic.php?f=30&t=146354"
"fontdrvhost.exe"
"C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe" -newprocess "4664 2 0 1 173" -logfolder "C:\Users\snake.d\AppData\Local\Opera\Opera x64\logs"

"C:\Users\snake.d\AppData\Local\Opera\Opera x64\temporary_downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d9f16d8b-81b5-4667-af4d-25365bbf7fc9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-20 1815848]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-07-08 5595848]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-07-25 1283136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-21 405584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2014-07-02 6783776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-10-01 14040792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunDLLEntry]
C:\Windows\system32\AmbRunE.dll [2009-02-26 17920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TMMonitor.lnk - C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
"C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe"="C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe:*:Enabled:Daum PotPlayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.CFHD"=CFHD.dll
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-14 11:39:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-14 11:39:15 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-14 11:39:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-14 11:39:12 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-14 11:39:11 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-14 11:39:10 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-14 11:39:09 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-14 11:39:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-14 11:39:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-14 11:39:04 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-14 11:39:03 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-14 11:39:02 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-13 17:29:36 ----D---- C:\ProgramData\Baidu
2015-10-13 17:29:36 ----D---- C:\FFOutput
2015-10-12 20:28:10 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2015-10-12 20:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2015-10-12 20:25:09 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2015-10-12 20:25:09 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2015-10-12 20:25:09 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-10-06 07:38:22 ----D---- C:\rsit
2015-10-06 07:38:22 ----D---- C:\Program Files\trend micro
2015-10-06 07:35:13 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-10-06 07:35:02 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-01 11:06:31 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-01 11:06:31 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 11:06:30 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 11:06:29 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 11:06:28 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-01 11:06:27 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 11:06:20 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-01 11:06:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 11:06:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-01 11:06:16 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 11:06:15 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 11:06:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 10:53:14 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-10-01 10:53:14 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2015-10-01 10:46:25 ----D---- C:\Users\snake.d\AppData\Roaming\ProductData
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2015-10-01 10:35:02 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\SYSWOW64\MBAPO32.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBppld64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBPPCn64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBAPO64.dll
2015-10-01 10:34:58 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-10-01 10:34:57 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-10-01 10:34:55 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2015-10-01 10:34:53 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2015-09-21 21:22:22 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-21 21:22:21 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-21 21:22:20 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-21 21:22:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-21 21:22:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-21 21:22:14 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-21 21:22:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-21 21:22:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-21 21:22:11 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-21 21:22:10 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-21 21:22:10 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\system32\atmlib.dll

======List of files/folders modified in the last 1 month======

2015-10-14 21:34:09 ----D---- C:\WINDOWS\Temp
2015-10-14 21:21:37 ----D---- C:\WINDOWS\Prefetch
2015-10-14 21:20:46 ----D---- C:\WINDOWS\System32
2015-10-14 21:19:03 ----D---- C:\WINDOWS\INF
2015-10-14 21:19:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-14 21:12:14 ----D---- C:\Windows
2015-10-14 21:12:13 ----D---- C:\WINDOWS\system32\config
2015-10-14 21:12:10 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-14 21:12:08 ----D---- C:\WINDOWS\WinSxS
2015-10-14 21:12:07 ----SHD---- C:\Boot
2015-10-14 21:11:38 ----D---- C:\WINDOWS\debug
2015-10-14 21:11:38 ----D---- C:\ProgramData\NVIDIA
2015-10-14 21:10:28 ----D---- C:\WINDOWS\system32\drivers
2015-10-14 21:09:53 ----D---- C:\WINDOWS\system32\sru
2015-10-14 21:08:42 ----D---- C:\WINDOWS\SysWOW64
2015-10-14 21:08:42 ----D---- C:\WINDOWS\system32\Boot
2015-10-14 21:08:41 ----D---- C:\WINDOWS\system32\appraiser
2015-10-14 21:08:40 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-10-14 21:08:40 ----D---- C:\WINDOWS\AppPatch
2015-10-14 21:08:39 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-14 21:07:28 ----D---- C:\AdwCleaner
2015-10-14 21:07:24 ----D---- C:\WINDOWS\system32\Tasks
2015-10-14 21:07:23 ----RD---- C:\Program Files (x86)
2015-10-14 18:42:56 ----D---- C:\WINDOWS\system32\LogFiles
2015-10-14 18:42:54 ----D---- C:\WINDOWS\Logs
2015-10-14 16:58:34 ----D---- C:\WINDOWS\CbsTemp
2015-10-14 16:57:23 ----SHD---- C:\WINDOWS\Installer
2015-10-14 16:57:11 ----SHD---- C:\Config.Msi
2015-10-14 16:57:11 ----D---- C:\ProgramData\Microsoft Help
2015-10-14 16:49:52 ----D---- C:\WINDOWS\system32\MRT
2015-10-14 16:49:48 ----A---- C:\WINDOWS\system32\MRT.exe
2015-10-14 11:33:18 ----D---- C:\WINDOWS\system32\catroot2
2015-10-14 11:28:25 ----D---- C:\WINDOWS\AppReadiness
2015-10-14 09:42:22 ----HD---- C:\Program Files\WindowsApps
2015-10-13 22:09:28 ----D---- C:\ProgramData\Package Cache
2015-10-13 22:09:27 ----RSD---- C:\WINDOWS\assembly
2015-10-13 17:29:36 ----HD---- C:\ProgramData
2015-10-13 17:29:20 ----D---- C:\Program Files\Recuva
2015-10-13 10:51:09 ----SHD---- C:\System Volume Information
2015-10-12 20:33:37 ----D---- C:\ProgramData\NVIDIA Corporation
2015-10-12 20:32:28 ----A---- C:\WINDOWS\system32\ServiceFilter.ini
2015-10-12 20:32:26 ----A---- C:\WINDOWS\system32\AutoRunFilter.ini
2015-10-12 20:28:10 ----D---- C:\Program Files\NVIDIA Corporation
2015-10-12 20:28:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-10-12 20:25:14 ----RD---- C:\Users
2015-10-07 16:11:19 ----D---- C:\Users\snake.d\AppData\Roaming\Skype
2015-10-06 08:50:56 ----D---- C:\WINDOWS\rescache
2015-10-06 07:38:22 ----RD---- C:\Program Files
2015-10-05 17:06:33 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-05 17:05:16 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-05 17:05:16 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-05 17:05:11 ----SD---- C:\WINDOWS\system32\F12
2015-10-05 17:05:11 ----D---- C:\WINDOWS\system32\migration
2015-10-05 17:05:00 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-05 17:05:00 ----D---- C:\WINDOWS\Provisioning
2015-10-05 17:04:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-02 19:36:41 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-10-01 10:51:26 ----D---- C:\Program Files (x86)\Opera
2015-10-01 10:42:14 ----D---- C:\Program Files\Windows Journal
2015-10-01 10:39:02 ----D---- C:\Program Files (x86)\IObit
2015-10-01 10:35:58 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBWrp64.dll
2015-10-01 10:18:28 ----D---- C:\Program Files\CCleaner
2015-09-24 07:32:29 ----D---- C:\WINDOWS\Minidump
2015-09-21 08:38:44 ----D---- C:\WINDOWS\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\WINDOWS\system32\drivers\AsDsm.sys [2014-12-08 35384]
R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2015-07-14 251632]
R0 iaStor;@oem9.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2009-06-04 408600]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-01-01 26528]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2015-07-14 168208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmpx64.sys [2009-06-26 67584]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimssn64.sys [2015-05-10 86528]
R2 risdptsk;risdptsk; C:\WINDOWS\System32\drivers\risdsn64.sys [2015-05-10 76288]
R2 rismxdp;@oem43.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdpx64.sys [2009-06-26 57856]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-09-18 22784]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-10-01 4514008]
R3 itecir;@oem41.inf,%itecir.SVCDESC%;ITECIR Infrared Receiver; C:\WINDOWS\system32\DRIVERS\itecir.sys [2015-01-01 69736]
R3 ITECIRfilter;@oem41.inf,%filter.SvcDesc%;ITECIR Filter Driver; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [2015-01-01 28264]
R3 kbfiltr;@oem28.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2009-07-20 15416]
R3 MarvinBus;@oem30.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-23 261120]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-07 175104]
R3 MTsensor;@oem42.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATK64AMD.sys [2009-05-13 15928]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\WINDOWS\System32\drivers\NETwsw00.sys [2015-03-09 11530144]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256]
R3 nvvad_WaveExtensible;@oem21.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 rt640x64;@oem17.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-01 888064]
R3 SaiMini;SaiMini; C:\WINDOWS\System32\drivers\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SynTP;@oem52.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-07-20 274480]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2015-04-06 834544]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 AF15BDA;@oem5.inf,%AF15BDA.FriendlyName%;AF9015 BDA Filter; C:\WINDOWS\System32\Drivers\AF15BDA.sys [2006-09-28 362624]
S3 bcbtums;@oem63.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 170712]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-08-20 929280]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
S3 btwampfl;@oem63.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2014-12-13 21712]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw1v64.sys [2009-08-10 7058432]
S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-07 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem4.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-08-13 206080]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-09-17 359552]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BcmBtRSupport;@oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 2255064]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-07-08 1353720]
R2 HiSuiteOuc64.exe;HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [2014-09-05 138272]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [2014-09-05 219680]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-08-07 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-07 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nHancer;nHancer Support; C:\Program Files\nHancer\nHancerService.exe [2010-05-02 39424]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 SaiDOutput;Saitek DirectOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [2014-07-30 233984]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session3;Hostitel synchronizace_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2014-12-08 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2014-12-08 79360]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session3;Data kontaktů_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-07 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pros9m o kontrolu děkuji

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Skype\Toolbars
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d9f16d8b-81b5-4667-af4d-25365bbf7fc9}]/64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Snake.d
Návštěvník
Návštěvník
Příspěvky: 66
Registrován: 31 led 2007 11:54

Re: Pros9m o kontrolu děkuji

#7 Příspěvek od Snake.d »

Rudy píše:Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Skype\Toolbars
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d9f16d8b-81b5-4667-af4d-25365bbf7fc9}]/64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Logfile of random's system information tool 1.10 (written by random/random)
Run by snake.d at 2015-10-15 17:14:27
Microsoft Windows 10 Pro
System drive C: has 30 GB (25%) free of 119 GB
Total RAM: 4095 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:36, on 15.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\trend micro\snake.d.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {6d010537-9e99-400b-b652-b0d5a5757e5d} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HiSuiteOuc64.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nHancer Support (nHancer) - KSE - Korndörfer Software Engineering - C:\Program Files\nHancer\nHancerService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Saitek DirectOutput (SaiDOutput) - Saitek - C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11660 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e5216643-52eb-4cca-b28c-643daba033e5 -SystemEventPortName:HostProcess-7d931088-e7cf-4193-bc25-66ceeb91f6d2 -IoCancelEventPortName:HostProcess-d504e12d-c4b1-41db-94a0-d7b08a75f08f -NonStateChangingEventPortName:HostProcess-25c44583-8f23-4cc1-82f7-4948f90bc1a5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ead40b3b-92f2-4bd8-9816-b8a32c4732a5 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
C:\WINDOWS\system32\mqsvc.exe
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\nHancer\nHancerService.exe"
dashost.exe {4c0f5938-a39c-4e8a-8352cf1c9a73e649}
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe" -switch-3be2f036c43042cdb03588591c9325c3
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss a09acbe2-add9-4bea-894d-b905c9ab98bd 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskeng.exe {1C5AEBDC-4144-4BC1-89D5-FAB2F428573F}
"C:\Program Files\P4G\BatteryLife.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
ATKOSD.exe
C:\WINDOWS\System32\svchost.exe -k AppReadiness
KBFiltr.exe
WDC.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1

"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files\Opera x64\Opera.exe" "http://forum.viry.cz/viewtopic.php?f=30&t=146354"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac

C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Users\snake.d\AppData\Local\Opera\Opera x64\temporary_downloads\RSITx64 (1).exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16464_none_116100d161f6ab1d\TiWorker.exe -Embedding

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-20 1815848]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-07-08 5595848]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-07-25 1283136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-21 405584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\snake.d\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2014-07-02 6783776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-10-01 14040792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunDLLEntry]
C:\Windows\system32\AmbRunE.dll [2009-02-26 17920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TMMonitor.lnk - C:\Program Files (x86)\MSI\ArcSoft\TotalMedia\TMMonitor.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
"C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe"="C:\Program Files (x86)\DAUM\PotPlayer\PotPlayerMini.exe:*:Enabled:Daum PotPlayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.CFHD"=CFHD.dll
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-15 17:09:19 ----D---- C:\_OTM
2015-10-14 11:39:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-14 11:39:15 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-14 11:39:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-14 11:39:12 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-14 11:39:11 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-14 11:39:10 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-14 11:39:09 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-14 11:39:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-14 11:39:06 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-14 11:39:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-14 11:39:04 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-14 11:39:03 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-14 11:39:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-14 11:39:02 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-14 11:39:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-14 11:39:00 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-14 11:38:59 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-14 11:38:58 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-13 17:29:36 ----D---- C:\ProgramData\Baidu
2015-10-13 17:29:36 ----D---- C:\FFOutput
2015-10-12 20:28:10 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2015-10-12 20:28:10 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2015-10-12 20:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2015-10-12 20:25:09 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2015-10-12 20:25:09 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2015-10-12 20:25:09 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-10-12 20:25:08 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-10-12 20:25:07 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-10-06 07:38:22 ----D---- C:\rsit
2015-10-06 07:38:22 ----D---- C:\Program Files\trend micro
2015-10-06 07:35:13 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-10-06 07:35:03 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-10-06 07:35:02 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-01 11:06:31 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-01 11:06:31 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 11:06:30 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 11:06:29 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 11:06:28 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-01 11:06:27 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 11:06:26 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 11:06:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 11:06:24 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-01 11:06:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-01 11:06:21 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 11:06:20 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-01 11:06:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-01 11:06:17 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 11:06:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-01 11:06:16 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 11:06:15 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 11:06:15 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 11:06:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 11:06:13 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 11:06:12 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 11:06:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 11:06:10 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 11:06:09 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 11:06:08 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 11:06:07 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 11:06:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 11:06:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 11:06:04 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 11:06:03 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 11:06:02 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 11:06:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 11:06:01 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 11:05:58 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-01 11:05:57 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 11:05:56 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 10:53:14 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-10-01 10:53:14 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2015-10-01 10:46:25 ----D---- C:\Users\snake.d\AppData\Roaming\ProductData
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2015-10-01 10:36:36 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2015-10-01 10:35:17 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2015-10-01 10:35:15 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2015-10-01 10:35:04 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2015-10-01 10:35:02 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\SYSWOW64\MBAPO32.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBppld64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBPPCn64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBAPO64.dll
2015-10-01 10:34:58 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-10-01 10:34:57 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-10-01 10:34:55 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2015-10-01 10:34:53 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2015-10-01 10:34:52 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2015-09-21 21:22:22 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-21 21:22:21 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-21 21:22:20 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-21 21:22:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-21 21:22:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-21 21:22:14 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-21 21:22:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-21 21:22:12 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-21 21:22:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-21 21:22:11 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-21 21:22:10 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-21 21:22:10 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-21 21:22:09 ----A---- C:\WINDOWS\system32\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-21 21:22:07 ----A---- C:\WINDOWS\system32\atmlib.dll

======List of files/folders modified in the last 1 month======

2015-10-15 17:14:24 ----D---- C:\WINDOWS\Temp
2015-10-15 17:12:54 ----D---- C:\WINDOWS\Prefetch
2015-10-15 17:12:16 ----D---- C:\WINDOWS\System32
2015-10-15 17:11:19 ----D---- C:\ProgramData\NVIDIA
2015-10-15 17:10:22 ----D---- C:\WINDOWS\system32\sru
2015-10-15 17:09:44 ----D---- C:\WINDOWS\SysWOW64
2015-10-15 17:09:44 ----D---- C:\Windows
2015-10-15 17:09:21 ----RD---- C:\Program Files (x86)\Skype
2015-10-15 17:09:21 ----D---- C:\WINDOWS\Tasks
2015-10-15 16:57:16 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-15 16:53:21 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-15 16:53:17 ----D---- C:\WINDOWS\WinSxS
2015-10-15 16:32:53 ----D---- C:\WINDOWS\AppReadiness
2015-10-15 16:32:52 ----HD---- C:\Program Files\WindowsApps
2015-10-15 16:31:40 ----D---- C:\WINDOWS\system32\LogFiles
2015-10-14 21:19:03 ----D---- C:\WINDOWS\INF
2015-10-14 21:19:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-14 21:17:41 ----D---- C:\WINDOWS\system32\config
2015-10-14 21:12:07 ----SHD---- C:\Boot
2015-10-14 21:11:38 ----D---- C:\WINDOWS\debug
2015-10-14 21:10:28 ----D---- C:\WINDOWS\system32\drivers
2015-10-14 21:08:42 ----D---- C:\WINDOWS\system32\Boot
2015-10-14 21:08:41 ----D---- C:\WINDOWS\system32\appraiser
2015-10-14 21:08:40 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-10-14 21:08:40 ----D---- C:\WINDOWS\AppPatch
2015-10-14 21:07:28 ----D---- C:\AdwCleaner
2015-10-14 21:07:24 ----D---- C:\WINDOWS\system32\Tasks
2015-10-14 21:07:23 ----RD---- C:\Program Files (x86)
2015-10-14 18:42:54 ----D---- C:\WINDOWS\Logs
2015-10-14 16:58:34 ----D---- C:\WINDOWS\CbsTemp
2015-10-14 16:57:23 ----SHD---- C:\WINDOWS\Installer
2015-10-14 16:57:11 ----SHD---- C:\Config.Msi
2015-10-14 16:57:11 ----D---- C:\ProgramData\Microsoft Help
2015-10-14 16:54:34 ----D---- C:\WINDOWS\system32\MRT
2015-10-14 16:49:48 ----A---- C:\WINDOWS\system32\MRT.exe
2015-10-14 11:33:18 ----D---- C:\WINDOWS\system32\catroot2
2015-10-13 22:09:28 ----D---- C:\ProgramData\Package Cache
2015-10-13 22:09:27 ----RSD---- C:\WINDOWS\assembly
2015-10-13 17:29:36 ----HD---- C:\ProgramData
2015-10-13 17:29:20 ----D---- C:\Program Files\Recuva
2015-10-13 10:51:09 ----SHD---- C:\System Volume Information
2015-10-12 20:33:37 ----D---- C:\ProgramData\NVIDIA Corporation
2015-10-12 20:32:28 ----A---- C:\WINDOWS\system32\ServiceFilter.ini
2015-10-12 20:32:26 ----A---- C:\WINDOWS\system32\AutoRunFilter.ini
2015-10-12 20:28:10 ----D---- C:\Program Files\NVIDIA Corporation
2015-10-12 20:28:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-10-12 20:25:14 ----RD---- C:\Users
2015-10-07 16:11:19 ----D---- C:\Users\snake.d\AppData\Roaming\Skype
2015-10-06 08:50:56 ----D---- C:\WINDOWS\rescache
2015-10-06 07:38:22 ----RD---- C:\Program Files
2015-10-05 17:06:33 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-05 17:05:16 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-05 17:05:16 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-05 17:05:12 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-05 17:05:11 ----SD---- C:\WINDOWS\system32\F12
2015-10-05 17:05:11 ----D---- C:\WINDOWS\system32\migration
2015-10-05 17:05:00 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-05 17:05:00 ----D---- C:\WINDOWS\Provisioning
2015-10-05 17:04:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-02 19:36:41 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-10-01 10:51:26 ----D---- C:\Program Files (x86)\Opera
2015-10-01 10:42:14 ----D---- C:\Program Files\Windows Journal
2015-10-01 10:39:02 ----D---- C:\Program Files (x86)\IObit
2015-10-01 10:35:58 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-10-01 10:35:14 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-01 10:35:03 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2015-10-01 10:35:01 ----A---- C:\WINDOWS\system32\MBWrp64.dll
2015-10-01 10:18:28 ----D---- C:\Program Files\CCleaner
2015-09-24 07:32:29 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\WINDOWS\system32\drivers\AsDsm.sys [2014-12-08 35384]
R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2015-07-14 251632]
R0 iaStor;@oem9.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2009-06-04 408600]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-01-01 26528]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2015-07-14 168208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmpx64.sys [2009-06-26 67584]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimssn64.sys [2015-05-10 86528]
R2 risdptsk;risdptsk; C:\WINDOWS\System32\drivers\risdsn64.sys [2015-05-10 76288]
R2 rismxdp;@oem43.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdpx64.sys [2009-06-26 57856]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-09-18 22784]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-10-01 4514008]
R3 itecir;@oem41.inf,%itecir.SVCDESC%;ITECIR Infrared Receiver; C:\WINDOWS\system32\DRIVERS\itecir.sys [2015-01-01 69736]
R3 ITECIRfilter;@oem41.inf,%filter.SvcDesc%;ITECIR Filter Driver; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [2015-01-01 28264]
R3 kbfiltr;@oem28.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2009-07-20 15416]
R3 MarvinBus;@oem30.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-23 261120]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-07 175104]
R3 MTsensor;@oem42.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATK64AMD.sys [2009-05-13 15928]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\WINDOWS\System32\drivers\NETwsw00.sys [2015-03-09 11530144]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256]
R3 nvvad_WaveExtensible;@oem21.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 rt640x64;@oem17.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-01 888064]
R3 SaiMini;SaiMini; C:\WINDOWS\System32\drivers\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SynTP;@oem52.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-07-20 274480]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2015-04-06 834544]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 AF15BDA;@oem5.inf,%AF15BDA.FriendlyName%;AF9015 BDA Filter; C:\WINDOWS\System32\Drivers\AF15BDA.sys [2006-09-28 362624]
S3 bcbtums;@oem63.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 170712]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-08-20 929280]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
S3 btwampfl;@oem63.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2014-12-13 21712]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw1v64.sys [2009-08-10 7058432]
S3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\WINDOWS\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-07 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 ssudmdm;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem4.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-08-13 206080]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-09-17 359552]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BcmBtRSupport;@oem63.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 2255064]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-07-08 1353720]
R2 HiSuiteOuc64.exe;HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [2014-09-05 138272]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [2014-09-05 219680]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-08-07 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-07 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nHancer;nHancer Support; C:\Program Files\nHancer\nHancerService.exe [2010-05-02 39424]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 SaiDOutput;Saitek DirectOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [2014-07-30 233984]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session3;Hostitel synchronizace_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2014-12-08 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2014-12-08 79360]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-28 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session3;Data kontaktů_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-07 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pros9m o kontrolu děkuji

#8 Příspěvek od Rudy »

Smazáno. Log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Snake.d
Návštěvník
Návštěvník
Příspěvky: 66
Registrován: 31 led 2007 11:54

Re: Pros9m o kontrolu děkuji

#9 Příspěvek od Snake.d »

Rudy píše:Smazáno. Log je již OK.
Rudy, dííky moc
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pros9m o kontrolu děkuji

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Preventivní kontroly logů“