Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

strasne pomaly, niekedy treba restart aby sa dalo prihlasit

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Zuzz
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 23 led 2016 23:53

strasne pomaly, niekedy treba restart aby sa dalo prihlasit

#1 Příspěvek od Zuzz »

zdravim,

sestra vravi, ze je vsetko pomale a niekedy sa bez resetu neda ani prihlasit :(

vopred vdaka

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2016-01-23 23:58:35
Microsoft Windows 10 Home
System drive C: has 57 GB (19%) free of 299 GB
Total RAM: 3852 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:58:40 PM on 1/23/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main Start Page = https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.1.8.599&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe -112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AvgAMPS - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll -1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll -100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll -118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll -1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll -100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee Inc. - C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll -2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll -102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe -2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll -1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe -101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe -3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe -1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe -101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe -702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe -101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll -1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe -100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe -102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater40.2.4 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe -104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe -110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe -101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 13379 bytes

Err:510




c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-f8c5-4b12dc9ad245 /binaryPath="C:\Program Files (x86)\AVG\Av\\"



C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\System32\WUDFHost.exe"" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b364c9c2-1890-4404-a8c7-4e9bf287316e -SystemEventPortName:HostProcess-e1707f63-ffed-4779-b3af-8668e92fd4ef -IoCancelEventPortName:HostProcess-93793e56-a744-48fa-8c3b-3028c1733911 -NonStateChangingEventPortName:HostProcess-38a30788-b4a1-4934-bf38-e306f98dffdd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ba819d2a-ce86-427f-a955-03d1d31d315f -DeviceGroupId:WudfDefaultDevicePool
""C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc

C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe"" /service
""C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files\Bonjour\mDNSResponder.exe
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe"" /service
dashost.exe {2eb2985c-c1d3-4b56-a37be27693011b10}
C:\WINDOWS\system32\svchost.exe -k imgsvc
""C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
C:\Program Files (x86)\AVG\Av\avgnsa.exe
C:\Program Files (x86)\AVG\Av\avgemca.exe

winlogon.exe
dwm.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\WINDOWS\system32\nvvsvc.exe -session
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
igfxHK.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe"" -ServerName:SkypeHost.ServerServer
""C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE "
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe"" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
""C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe"" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
""C:/Program Files/NVIDIA Corporation/Display/nvtray.exe"" -user_has_logged_in 1
""C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
""C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"" -s
""C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe"" /FORPCEE4
""C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe "
C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
C:\Program Files\iTunes\iTunesHelper.exe
"C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe"" /c
""C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe "
C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe
/TRAYONLY
"C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe"" /systemstartup
""C:\Program Files (x86)\AVG Web TuneUp\vprot.exe "
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
/fmw.trayonly
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\wbem\wmiprvse.exe
fontdrvhost.exe
ctfmon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\WINDOWS\System32\NetworkUXBroker.exe"" -ServerName:Windows.Networking.UX
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
taskeng.exe {92DF597C-1C45-4BD5-8BDB-809659AAA827}
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
""C:\WINDOWS\system32\SearchProtocolHost.exe"" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 ""Software\Microsoft\Windows Search"" ""Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)"" ""C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc"" ""DownLevelDaemon "
"C:\WINDOWS\system32\SearchFilterHost.exe"" 0 596 600 608 8192 604
""C:\WINDOWS\system32\SearchProtocolHost.exe"" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1406755398-1355060213-3156159159-10014_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1406755398-1355060213-3156159159-10014 1 -2147483646 ""Software\Microsoft\Windows Search"" ""Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)"" ""C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc"" ""DownLevelDaemon"" ""1"

C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Users\Admin\Downloads\RSITx64.exe

Err:510

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001Core.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001UA.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

Err:510

ProfilePath - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l472txsh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.2.2.128&pid=wtu&sg=&sap=hp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
""Description""=iTunes Detector Plug-in
""Path""=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
""Description""=
""Path""=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
""Description""=
""Path""=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29]
""Description""=Intel IPT WebApi plugin
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
""Description""=This plugin updates Intel WebAPI component
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
""Description""=NVIDIA stereo images plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
""Description""=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
""Description""=Handles PDFs in-place in Firefox
""Path""=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
""Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
""Description""=Java™ Deployment Toolkit
""Path""=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
""Description""=Oracle® Next Generation Java™ Plug-In
""Path""=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll


C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l472txsh.default\searchplugins\
avg-secure-search.xml
conduit-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-13 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-16 2476432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-13 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-16 2410896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""RtHDVCpl""=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-06-25 13626072]
""RtHDVBg_Dolby""=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-06-05 1311304]
""IAStorIcon""=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-05-08 36352]
""Energy Manager""=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-10-13 15794160]
""Lenovo Utility""=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-10-13 80368]
""IgfxTray""=C:\Windows\system32\igfxtray.exe [2015-07-17 396688]
""NvBackend""=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-11-12 2757424]
""ShadowPlay""=C:\WINDOWS\system32\nvspcap64.dll [2015-11-12 1828160]
""SynTPEnh""=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-12 3945672]
""iTunesHelper""=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-17 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""Dropbox Update""=C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 134512]
""Akamai NetSession Interface""=C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe [2015-09-10 4691384]
""OneDrive""=C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-24 551112]
""Skype""=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17 50378880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""SunJavaUpdateSched""=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
""AVG_UI""=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-01-08 25512]
""vProt""=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2015-12-16 2814864]
""HP Software Update""=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
""AvgUi""=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-01-12 179624]
""QuickTime Task""=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
""AppInit_DLLs""=""C:\Windows\system32\nvinitx.dll "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled""=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
""midimapper""=midimap.dll
""msacm.imaadpcm""=imaadp32.acm
""msacm.l3acm""=C:\Windows\System32\l3codeca.acm
""msacm.msadpcm""=msadp32.acm
""msacm.msg711""=msg711.acm
""msacm.msgsm610""=msgsm32.acm
""vidc.i420""=iyuv_32.dll
""vidc.iyuv""=iyuv_32.dll
""vidc.mrle""=msrle32.dll
""vidc.msvc""=msvidc32.dll
""vidc.uyvy""=msyuv.dll
""vidc.yuy2""=msyuv.dll
""vidc.yvu9""=tsbyuv.dll
""vidc.yvyu""=msyuv.dll
""wavemapper""=msacm32.drv
""wave""=wdmaud.drv
""midi""=wdmaud.drv
""mixer""=wdmaud.drv
""aux""=wdmaud.drv
""wave1""=wdmaud.drv
""midi1""=wdmaud.drv
""mixer1""=wdmaud.drv
""aux1""=wdmaud.drv
""MSVideo8""=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe ""%1"" %*

======List of files/folders created in the last 1 month======

2016-01-23 23:58:35 ----D---- C:\rsit
2016-01-23 23:58:35 ----D---- C:\Program Files\trend micro
2016-01-13 10:57:14 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-13 10:57:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 10:57:04 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-01-13 10:57:03 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-01-13 10:56:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-01-13 10:56:58 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 10:56:53 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 10:56:52 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-01-13 10:56:51 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\mfps.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\quartz.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\evr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\invagent.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\devinv.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\schannel.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\winload.exe
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\qedit.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\omadmclient.exe
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-01-13 10:56:37 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\aepic.dll
2016-01-08 12:03:25 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2015-12-28 17:41:48 ----D---- C:\Program Files\iPod
2015-12-28 17:41:48 ----D---- C:\Program Files (x86)\iTunes
2015-12-28 17:41:48 ----AD---- C:\Program Files\iTunes
2015-12-25 19:05:14 ----D---- C:\WINDOWS\system32\SleepStudy
2015-12-24 11:03:54 ----SHD---- C:\Recovery
2015-12-24 10:48:15 ----ASH---- C:\hiberfil.sys
2015-12-24 10:39:23 ----SD---- C:\Users\Admin\AppData\Roaming\Microsoft
2015-12-24 10:36:33 ----D---- C:\ProgramData\NVIDIA
2015-12-24 10:36:28 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-12-24 10:36:25 ----HD---- C:\Program Files (x86)\Uninstall Information
2015-12-24 10:36:13 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-24 10:36:02 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-24 10:36:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-12-24 10:35:43 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-24 10:35:07 ----D---- C:\Program Files\Intel
2015-12-24 10:34:35 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-12-24 10:34:35 ----D---- C:\Program Files\Realtek
2015-12-24 10:34:19 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-12-24 10:34:07 ----D---- C:\Program Files\Synaptics
2015-12-24 10:32:37 ----AS---- C:\WINDOWS\bootstat.dat
2015-12-24 10:32:02 ----D---- C:\WINDOWS\Prefetch
2015-12-24 10:31:15 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-24 10:30:10 ----DC---- C:\WINDOWS\Panther
2015-12-24 10:26:15 ----D---- C:\Windows.old
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.proxy.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfds.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MDEServer.exe
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\dialserver.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iesetup.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iernonce.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\wwapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\mssign32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wsplib.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wshrm.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wininetlui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wifitask.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\twinui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\StorSvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\shell32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\services.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\rilproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provtool.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provops.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provengine.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\mssign32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\lpk.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\jsproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\XblAuthManagerProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BackgroundTransferHost.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\NMAA.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\nativemap.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosStorage.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosResource.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\moshostcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\moshost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mf.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InputService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\d3d11.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\cryptngc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\cdp.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCoreRes.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\fveapibase.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-12-24 10:16:08 ----D---- C:\WINDOWS\system32\Microsoft

======List of files/folders modified in the last 1 month======

2016-01-23 23:58:35 ----RD---- C:\Program Files
2016-01-23 23:56:49 ----D---- C:\Users\Admin\AppData\Roaming\Dropbox
2016-01-23 23:56:11 ----D---- C:\WINDOWS\Temp
2016-01-23 23:41:39 ----D---- C:\ProgramData\MFAData
2016-01-23 23:39:31 ----D---- C:\WINDOWS\System32
2016-01-23 23:38:40 ----D---- C:\WINDOWS\system32\sru
2016-01-23 00:43:09 ----D---- C:\WINDOWS\system32\drivers
2016-01-22 23:36:23 ----D---- C:\WINDOWS\AppReadiness
2016-01-22 21:26:33 ----SHD---- C:\WINDOWS\Installer
2016-01-22 21:26:32 ----HD---- C:\Config.Msi
2016-01-21 22:33:39 ----HD---- C:\Program Files\WindowsApps
2016-01-21 17:40:54 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2016-01-21 14:15:31 ----SHD---- C:\System Volume Information
2016-01-21 14:12:50 ----D---- C:\WINDOWS\system32\config
2016-01-21 14:05:50 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-21 12:30:34 ----D---- C:\WINDOWS\system32\NDF
2016-01-21 12:21:41 ----D---- C:\ProgramData\Skype
2016-01-21 12:21:35 ----RD---- C:\Program Files (x86)\Skype
2016-01-21 12:21:35 ----D---- C:\Program Files (x86)\Common Files
2016-01-20 20:55:16 ----D---- C:\WINDOWS\SysWOW64
2016-01-15 21:11:03 ----D---- C:\WINDOWS\system32\DriverStore
2016-01-14 09:57:54 ----D---- C:\WINDOWS\INF
2016-01-14 09:57:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 09:51:07 ----D---- C:\WINDOWS\WinSxS
2016-01-14 09:50:10 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\Boot
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\appraiser
2016-01-13 22:38:04 ----D---- C:\WINDOWS\AppPatch
2016-01-13 20:39:41 ----D---- C:\WINDOWS\CbsTemp
2016-01-13 20:37:22 ----D---- C:\WINDOWS\system32\MRT
2016-01-13 20:29:22 ----A---- C:\WINDOWS\system32\MRT.exe
2016-01-13 10:48:54 ----D---- C:\WINDOWS\system32\catroot2
2016-01-08 16:05:32 ----RD---- C:\Program Files (x86)
2016-01-03 02:40:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-12-30 13:30:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-29 21:18:41 ----D---- C:\WINDOWS\SYSWOW64\config
2015-12-28 17:41:48 ----D---- C:\Program Files\Common Files\Apple
2015-12-28 17:02:44 ----D---- C:\WINDOWS\Logs
2015-12-26 11:37:28 ----D---- C:\WINDOWS\system32\WDI
2015-12-25 18:57:47 ----D---- C:\WINDOWS\debug
2015-12-25 18:57:37 ----D---- C:\WINDOWS\system32\restore
2015-12-25 08:38:52 ----D---- C:\WINDOWS\appcompat
2015-12-24 21:54:30 ----D---- C:\WINDOWS\system32\LogFiles
2015-12-24 19:00:17 ----D---- C:\Windows
2015-12-24 12:27:54 ----RD---- C:\WINDOWS\DevicesFlow
2015-12-24 12:10:09 ----RD---- C:\WINDOWS\PrintDialog
2015-12-24 12:10:08 ----RD---- C:\WINDOWS\MiracastView
2015-12-24 12:09:36 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-12-24 11:15:41 ----HD---- C:\ProgramData\Common Files
2015-12-24 11:06:42 ----D---- C:\WINDOWS\rescache
2015-12-24 11:04:59 ----SD---- C:\ProgramData\Microsoft
2015-12-24 11:04:42 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-24 11:03:33 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-24 10:59:31 ----D---- C:\WINDOWS\Registration
2015-12-24 10:59:12 ----D---- C:\WINDOWS\system32\Tasks
2015-12-24 10:55:25 ----D---- C:\WINDOWS\Tasks
2015-12-24 10:53:43 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-24 10:51:54 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-12-24 10:51:52 ----D---- C:\WINDOWS\system32\wbem
2015-12-24 10:47:10 ----RSD---- C:\WINDOWS\Fonts
2015-12-24 10:47:10 ----HD---- C:\ProgramData
2015-12-24 10:47:10 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-12-24 10:47:10 ----D---- C:\WINDOWS\system32\NV
2015-12-24 10:43:36 ----D---- C:\WINDOWS\twain_32
2015-12-24 10:43:33 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-12-24 10:43:31 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-12-24 10:43:27 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-24 10:43:27 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-24 10:43:26 ----D---- C:\WINDOWS\system32\spool
2015-12-24 10:43:25 ----D---- C:\WINDOWS\system32\slmgr
2015-12-24 10:43:24 ----D---- C:\WINDOWS\system32\oobe
2015-12-24 10:43:23 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-24 10:43:22 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-24 10:43:22 ----D---- C:\WINDOWS\system32\en-US
2015-12-24 10:42:14 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-24 10:42:09 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-24 10:42:08 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-24 10:42:02 ----D---- C:\WINDOWS\InputMethod
2015-12-24 10:42:00 ----HD---- C:\WINDOWS\ELAMBKUP
2015-12-24 10:41:59 ----D---- C:\WINDOWS\ADFS
2015-12-24 10:41:57 ----RD---- C:\Users
2015-12-24 10:41:57 ----D---- C:\ProgramData\USOPrivate
2015-12-24 10:41:46 ----D---- C:\Program Files (x86)\Windows Mail
2015-12-24 10:41:41 ----D---- C:\Program Files\Windows Mail
2015-12-24 10:41:37 ----D---- C:\Program Files\Internet Explorer
2015-12-24 10:41:36 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-12-24 10:41:36 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-24 10:41:35 ----D---- C:\Program Files\Common Files
2015-12-24 10:41:34 ----RD---- C:\WINDOWS\assembly
2015-12-24 10:41:29 ----D---- C:\WINDOWS\system32\Recovery
2015-12-24 10:38:43 ----D---- C:\WINDOWS\system32\Sysprep
2015-12-24 10:36:28 ----D---- C:\WINDOWS\Help
2015-12-24 10:31:26 ----D---- C:\WINDOWS\ServiceProfiles
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\sk-SK
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\migration
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\Dism
2015-12-24 10:25:56 ----D---- C:\WINDOWS\Provisioning
2015-12-24 10:25:56 ----D---- C:\WINDOWS\bcastdvr
2015-12-24 10:25:56 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-24 10:22:11 ----D---- C:\WINDOWS\OCR
2015-12-24 10:21:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-12-24 10:21:17 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-12-24 10:21:17 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-12-24 10:21:16 ----SD---- C:\WINDOWS\system32\F12
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\WCN
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\migwiz
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\en
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-12-24 10:21:16 ----D---- C:\WINDOWS\en-US
2015-12-24 10:21:16 ----D---- C:\Program Files\Windows Photo Viewer
2015-12-24 10:21:16 ----D---- C:\Program Files\Windows Journal
2015-12-24 10:21:16 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-12-24 10:00:59 ----HD---- C:\$WINDOWS.~BT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2015-08-20 298416]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2015-08-14 398256]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2015-12-04 258480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-05-08 679920]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-07-23 31376]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-11-06 184240]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2015-12-04 315312]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem9.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-10-13 35600]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 ibtusb;@oem11.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2015-07-14 263952]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-17 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-25 3462616]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-15 27032]
R3 MEIx64;@oem20.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-05-16 64624]
R3 NETwNb64;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\WINDOWS\System32\drivers\Netwbw02.sys [2015-10-30 3485696]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-11-12 19760]
R3 nvvad_WaveExtensible;@oem26.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 rt640x64;@oem19.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-22 886528]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-10-12 42696]
R3 SynTP;@oem4.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-10-12 618696]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2015-09-09 23152]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-24 117248]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-15 39320]
S3 IntcDAud;@oem22.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-05-08 442368]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2013-05-09 260680]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-01-08 3906568]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-01-12 1048488]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-01-08 583936]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-11-12 1156400]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-05-08 15344]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-17 351120]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-16 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-16 169432]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-11-12 1872688]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-11-12 5915440]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 OneSyncSvc_98b51;Sync Host_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-10-12 246472]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-17 283024]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-17 644880]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-11-12 8133424]
R3 PimIndexMaintenanceSvc_98b51;Kontaktné údaje_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-16 366552]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_57b5fe;Sync Host_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-01-08 627544]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe [2015-12-02 289256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_57b5fe;MessagingService_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_98b51;MessagingService_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-08 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_57b5fe;Kontaktné údaje_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
"

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zuzz
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 23 led 2016 23:53

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#3 Příspěvek od Zuzz »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2016-01-23 23:58:35
Microsoft Windows 10 Home
System drive C: has 57 GB (19%) free of 299 GB
Total RAM: 3852 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:58:40 PM on 1/23/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main Start Page = https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.1.8.599&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe -112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AvgAMPS - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll -1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll -100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll -118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll -1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll -100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee Inc. - C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll -2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll -102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe -2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll -1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe -101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe -3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe -1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe -101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe -702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe -101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll -1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe -100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe -102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater40.2.4 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe -104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe -110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe -101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 13379 bytes

Err:510




c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-f8c5-4b12dc9ad245 /binaryPath="C:\Program Files (x86)\AVG\Av\\"



C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\System32\WUDFHost.exe"" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b364c9c2-1890-4404-a8c7-4e9bf287316e -SystemEventPortName:HostProcess-e1707f63-ffed-4779-b3af-8668e92fd4ef -IoCancelEventPortName:HostProcess-93793e56-a744-48fa-8c3b-3028c1733911 -NonStateChangingEventPortName:HostProcess-38a30788-b4a1-4934-bf38-e306f98dffdd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ba819d2a-ce86-427f-a955-03d1d31d315f -DeviceGroupId:WudfDefaultDevicePool
""C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc

C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe"" /service
""C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files\Bonjour\mDNSResponder.exe
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe"" /service
dashost.exe {2eb2985c-c1d3-4b56-a37be27693011b10}
C:\WINDOWS\system32\svchost.exe -k imgsvc
""C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
C:\Program Files (x86)\AVG\Av\avgnsa.exe
C:\Program Files (x86)\AVG\Av\avgemca.exe

winlogon.exe
dwm.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\WINDOWS\system32\nvvsvc.exe -session
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
igfxHK.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe"" -ServerName:SkypeHost.ServerServer
""C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE "
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe"" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
""C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe"" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
""C:/Program Files/NVIDIA Corporation/Display/nvtray.exe"" -user_has_logged_in 1
""C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
""C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"" -s
""C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe"" /FORPCEE4
""C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe "
C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
C:\Program Files\iTunes\iTunesHelper.exe
"C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe"" /c
""C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe "
C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe
/TRAYONLY
"C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe"" /systemstartup
""C:\Program Files (x86)\AVG Web TuneUp\vprot.exe "
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
/fmw.trayonly
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\wbem\wmiprvse.exe
fontdrvhost.exe
ctfmon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\WINDOWS\System32\NetworkUXBroker.exe"" -ServerName:Windows.Networking.UX
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
taskeng.exe {92DF597C-1C45-4BD5-8BDB-809659AAA827}
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
""C:\WINDOWS\system32\SearchProtocolHost.exe"" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 ""Software\Microsoft\Windows Search"" ""Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)"" ""C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc"" ""DownLevelDaemon "
"C:\WINDOWS\system32\SearchFilterHost.exe"" 0 596 600 608 8192 604
""C:\WINDOWS\system32\SearchProtocolHost.exe"" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1406755398-1355060213-3156159159-10014_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1406755398-1355060213-3156159159-10014 1 -2147483646 ""Software\Microsoft\Windows Search"" ""Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)"" ""C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc"" ""DownLevelDaemon"" ""1"

C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Users\Admin\Downloads\RSITx64.exe

Err:510

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001Core.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001UA.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

Err:510

ProfilePath - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l472txsh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.2.2.128&pid=wtu&sg=&sap=hp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
""Description""=iTunes Detector Plug-in
""Path""=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
""Description""=
""Path""=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
""Description""=
""Path""=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29]
""Description""=Intel IPT WebApi plugin
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
""Description""=This plugin updates Intel WebAPI component
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
""Description""=NVIDIA stereo images plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
""Description""=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
""Description""=Handles PDFs in-place in Firefox
""Path""=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
""Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
""Description""=Java™ Deployment Toolkit
""Path""=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
""Description""=Oracle® Next Generation Java™ Plug-In
""Path""=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll


C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l472txsh.default\searchplugins\
avg-secure-search.xml
conduit-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-13 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-16 2476432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-13 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-16 2410896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""RtHDVCpl""=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-06-25 13626072]
""RtHDVBg_Dolby""=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-06-05 1311304]
""IAStorIcon""=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-05-08 36352]
""Energy Manager""=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-10-13 15794160]
""Lenovo Utility""=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-10-13 80368]
""IgfxTray""=C:\Windows\system32\igfxtray.exe [2015-07-17 396688]
""NvBackend""=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-11-12 2757424]
""ShadowPlay""=C:\WINDOWS\system32\nvspcap64.dll [2015-11-12 1828160]
""SynTPEnh""=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-12 3945672]
""iTunesHelper""=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-17 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""Dropbox Update""=C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 134512]
""Akamai NetSession Interface""=C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe [2015-09-10 4691384]
""OneDrive""=C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-24 551112]
""Skype""=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17 50378880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""SunJavaUpdateSched""=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
""AVG_UI""=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-01-08 25512]
""vProt""=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2015-12-16 2814864]
""HP Software Update""=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
""AvgUi""=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-01-12 179624]
""QuickTime Task""=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
""AppInit_DLLs""=""C:\Windows\system32\nvinitx.dll "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled""=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
""midimapper""=midimap.dll
""msacm.imaadpcm""=imaadp32.acm
""msacm.l3acm""=C:\Windows\System32\l3codeca.acm
""msacm.msadpcm""=msadp32.acm
""msacm.msg711""=msg711.acm
""msacm.msgsm610""=msgsm32.acm
""vidc.i420""=iyuv_32.dll
""vidc.iyuv""=iyuv_32.dll
""vidc.mrle""=msrle32.dll
""vidc.msvc""=msvidc32.dll
""vidc.uyvy""=msyuv.dll
""vidc.yuy2""=msyuv.dll
""vidc.yvu9""=tsbyuv.dll
""vidc.yvyu""=msyuv.dll
""wavemapper""=msacm32.drv
""wave""=wdmaud.drv
""midi""=wdmaud.drv
""mixer""=wdmaud.drv
""aux""=wdmaud.drv
""wave1""=wdmaud.drv
""midi1""=wdmaud.drv
""mixer1""=wdmaud.drv
""aux1""=wdmaud.drv
""MSVideo8""=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe ""%1"" %*

======List of files/folders created in the last 1 month======

2016-01-23 23:58:35 ----D---- C:\rsit
2016-01-23 23:58:35 ----D---- C:\Program Files\trend micro
2016-01-13 10:57:14 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-13 10:57:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 10:57:04 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-01-13 10:57:03 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-01-13 10:56:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-01-13 10:56:58 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 10:56:53 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 10:56:52 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-01-13 10:56:51 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\mfps.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\quartz.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\evr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\invagent.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\devinv.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\schannel.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\winload.exe
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\qedit.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\omadmclient.exe
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-01-13 10:56:37 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\aepic.dll
2016-01-08 12:03:25 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2015-12-28 17:41:48 ----D---- C:\Program Files\iPod
2015-12-28 17:41:48 ----D---- C:\Program Files (x86)\iTunes
2015-12-28 17:41:48 ----AD---- C:\Program Files\iTunes
2015-12-25 19:05:14 ----D---- C:\WINDOWS\system32\SleepStudy
2015-12-24 11:03:54 ----SHD---- C:\Recovery
2015-12-24 10:48:15 ----ASH---- C:\hiberfil.sys
2015-12-24 10:39:23 ----SD---- C:\Users\Admin\AppData\Roaming\Microsoft
2015-12-24 10:36:33 ----D---- C:\ProgramData\NVIDIA
2015-12-24 10:36:28 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-12-24 10:36:28 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-12-24 10:36:25 ----HD---- C:\Program Files (x86)\Uninstall Information
2015-12-24 10:36:13 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-24 10:36:02 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-24 10:36:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-12-24 10:35:43 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-24 10:35:43 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-24 10:35:07 ----D---- C:\Program Files\Intel
2015-12-24 10:34:35 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-12-24 10:34:35 ----D---- C:\Program Files\Realtek
2015-12-24 10:34:19 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-12-24 10:34:07 ----D---- C:\Program Files\Synaptics
2015-12-24 10:32:37 ----AS---- C:\WINDOWS\bootstat.dat
2015-12-24 10:32:02 ----D---- C:\WINDOWS\Prefetch
2015-12-24 10:31:15 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-24 10:30:10 ----DC---- C:\WINDOWS\Panther
2015-12-24 10:26:15 ----D---- C:\Windows.old
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.proxy.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfds.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\MDEServer.exe
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\dialserver.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-24 10:25:18 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iesetup.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iernonce.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-24 10:25:17 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\wwapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\mssign32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wsplib.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wshrm.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wininetlui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wifitask.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\twinui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\StorSvc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\shell32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\services.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\rilproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provtool.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provops.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provengine.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\mssign32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\lpk.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\jsproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-24 10:25:13 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\XblAuthManagerProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\SYSWOW64\BackgroundTransferHost.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\NMAA.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\nativemap.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosStorage.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosResource.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\moshostcore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\moshost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mf.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InputService.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\d3d11.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\cryptngc.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\cdp.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-12-24 10:25:10 ----A---- C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCoreRes.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\fveapibase.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-12-24 10:25:09 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-24 10:21:58 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-12-24 10:16:08 ----D---- C:\WINDOWS\system32\Microsoft

======List of files/folders modified in the last 1 month======

2016-01-23 23:58:35 ----RD---- C:\Program Files
2016-01-23 23:56:49 ----D---- C:\Users\Admin\AppData\Roaming\Dropbox
2016-01-23 23:56:11 ----D---- C:\WINDOWS\Temp
2016-01-23 23:41:39 ----D---- C:\ProgramData\MFAData
2016-01-23 23:39:31 ----D---- C:\WINDOWS\System32
2016-01-23 23:38:40 ----D---- C:\WINDOWS\system32\sru
2016-01-23 00:43:09 ----D---- C:\WINDOWS\system32\drivers
2016-01-22 23:36:23 ----D---- C:\WINDOWS\AppReadiness
2016-01-22 21:26:33 ----SHD---- C:\WINDOWS\Installer
2016-01-22 21:26:32 ----HD---- C:\Config.Msi
2016-01-21 22:33:39 ----HD---- C:\Program Files\WindowsApps
2016-01-21 17:40:54 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2016-01-21 14:15:31 ----SHD---- C:\System Volume Information
2016-01-21 14:12:50 ----D---- C:\WINDOWS\system32\config
2016-01-21 14:05:50 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-21 12:30:34 ----D---- C:\WINDOWS\system32\NDF
2016-01-21 12:21:41 ----D---- C:\ProgramData\Skype
2016-01-21 12:21:35 ----RD---- C:\Program Files (x86)\Skype
2016-01-21 12:21:35 ----D---- C:\Program Files (x86)\Common Files
2016-01-20 20:55:16 ----D---- C:\WINDOWS\SysWOW64
2016-01-15 21:11:03 ----D---- C:\WINDOWS\system32\DriverStore
2016-01-14 09:57:54 ----D---- C:\WINDOWS\INF
2016-01-14 09:57:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 09:51:07 ----D---- C:\WINDOWS\WinSxS
2016-01-14 09:50:10 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\Boot
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\appraiser
2016-01-13 22:38:04 ----D---- C:\WINDOWS\AppPatch
2016-01-13 20:39:41 ----D---- C:\WINDOWS\CbsTemp
2016-01-13 20:37:22 ----D---- C:\WINDOWS\system32\MRT
2016-01-13 20:29:22 ----A---- C:\WINDOWS\system32\MRT.exe
2016-01-13 10:48:54 ----D---- C:\WINDOWS\system32\catroot2
2016-01-08 16:05:32 ----RD---- C:\Program Files (x86)
2016-01-03 02:40:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-12-30 13:30:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-29 21:18:41 ----D---- C:\WINDOWS\SYSWOW64\config
2015-12-28 17:41:48 ----D---- C:\Program Files\Common Files\Apple
2015-12-28 17:02:44 ----D---- C:\WINDOWS\Logs
2015-12-26 11:37:28 ----D---- C:\WINDOWS\system32\WDI
2015-12-25 18:57:47 ----D---- C:\WINDOWS\debug
2015-12-25 18:57:37 ----D---- C:\WINDOWS\system32\restore
2015-12-25 08:38:52 ----D---- C:\WINDOWS\appcompat
2015-12-24 21:54:30 ----D---- C:\WINDOWS\system32\LogFiles
2015-12-24 19:00:17 ----D---- C:\Windows
2015-12-24 12:27:54 ----RD---- C:\WINDOWS\DevicesFlow
2015-12-24 12:10:09 ----RD---- C:\WINDOWS\PrintDialog
2015-12-24 12:10:08 ----RD---- C:\WINDOWS\MiracastView
2015-12-24 12:09:36 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-12-24 11:15:41 ----HD---- C:\ProgramData\Common Files
2015-12-24 11:06:42 ----D---- C:\WINDOWS\rescache
2015-12-24 11:04:59 ----SD---- C:\ProgramData\Microsoft
2015-12-24 11:04:42 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-24 11:03:33 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-24 10:59:31 ----D---- C:\WINDOWS\Registration
2015-12-24 10:59:12 ----D---- C:\WINDOWS\system32\Tasks
2015-12-24 10:55:25 ----D---- C:\WINDOWS\Tasks
2015-12-24 10:53:43 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-24 10:51:54 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-12-24 10:51:52 ----D---- C:\WINDOWS\system32\wbem
2015-12-24 10:47:10 ----RSD---- C:\WINDOWS\Fonts
2015-12-24 10:47:10 ----HD---- C:\ProgramData
2015-12-24 10:47:10 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-12-24 10:47:10 ----D---- C:\WINDOWS\system32\NV
2015-12-24 10:43:36 ----D---- C:\WINDOWS\twain_32
2015-12-24 10:43:33 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-12-24 10:43:31 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-12-24 10:43:27 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-24 10:43:27 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-24 10:43:26 ----D---- C:\WINDOWS\system32\spool
2015-12-24 10:43:25 ----D---- C:\WINDOWS\system32\slmgr
2015-12-24 10:43:24 ----D---- C:\WINDOWS\system32\oobe
2015-12-24 10:43:23 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-24 10:43:22 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-24 10:43:22 ----D---- C:\WINDOWS\system32\en-US
2015-12-24 10:42:14 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-24 10:42:09 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-24 10:42:08 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-24 10:42:02 ----D---- C:\WINDOWS\InputMethod
2015-12-24 10:42:00 ----HD---- C:\WINDOWS\ELAMBKUP
2015-12-24 10:41:59 ----D---- C:\WINDOWS\ADFS
2015-12-24 10:41:57 ----RD---- C:\Users
2015-12-24 10:41:57 ----D---- C:\ProgramData\USOPrivate
2015-12-24 10:41:46 ----D---- C:\Program Files (x86)\Windows Mail
2015-12-24 10:41:41 ----D---- C:\Program Files\Windows Mail
2015-12-24 10:41:37 ----D---- C:\Program Files\Internet Explorer
2015-12-24 10:41:36 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-12-24 10:41:36 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-24 10:41:35 ----D---- C:\Program Files\Common Files
2015-12-24 10:41:34 ----RD---- C:\WINDOWS\assembly
2015-12-24 10:41:29 ----D---- C:\WINDOWS\system32\Recovery
2015-12-24 10:38:43 ----D---- C:\WINDOWS\system32\Sysprep
2015-12-24 10:36:28 ----D---- C:\WINDOWS\Help
2015-12-24 10:31:26 ----D---- C:\WINDOWS\ServiceProfiles
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-12-24 10:25:59 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\sk-SK
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\migration
2015-12-24 10:25:57 ----D---- C:\WINDOWS\system32\Dism
2015-12-24 10:25:56 ----D---- C:\WINDOWS\Provisioning
2015-12-24 10:25:56 ----D---- C:\WINDOWS\bcastdvr
2015-12-24 10:25:56 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-24 10:22:11 ----D---- C:\WINDOWS\OCR
2015-12-24 10:21:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-12-24 10:21:17 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-12-24 10:21:17 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-12-24 10:21:16 ----SD---- C:\WINDOWS\system32\F12
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\WCN
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\migwiz
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\en
2015-12-24 10:21:16 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-12-24 10:21:16 ----D---- C:\WINDOWS\en-US
2015-12-24 10:21:16 ----D---- C:\Program Files\Windows Photo Viewer
2015-12-24 10:21:16 ----D---- C:\Program Files\Windows Journal
2015-12-24 10:21:16 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-12-24 10:00:59 ----HD---- C:\$WINDOWS.~BT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2015-08-20 298416]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2015-08-14 398256]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2015-12-04 258480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-05-08 679920]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-07-23 31376]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-11-06 184240]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2015-12-04 315312]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem9.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-10-13 35600]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 ibtusb;@oem11.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2015-07-14 263952]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-17 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-25 3462616]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-15 27032]
R3 MEIx64;@oem20.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-05-16 64624]
R3 NETwNb64;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\WINDOWS\System32\drivers\Netwbw02.sys [2015-10-30 3485696]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-11-12 19760]
R3 nvvad_WaveExtensible;@oem26.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 rt640x64;@oem19.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-22 886528]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-10-12 42696]
R3 SynTP;@oem4.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-10-12 618696]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2015-09-09 23152]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-24 117248]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-15 39320]
S3 IntcDAud;@oem22.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-05-08 442368]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2013-05-09 260680]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-01-08 3906568]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-01-12 1048488]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-01-08 583936]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-11-12 1156400]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-05-08 15344]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-17 351120]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-16 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-16 169432]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-11-12 1872688]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-11-12 5915440]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 OneSyncSvc_98b51;Sync Host_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-10-12 246472]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-17 283024]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-17 644880]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-11-12 8133424]
R3 PimIndexMaintenanceSvc_98b51;Kontaktné údaje_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-16 366552]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_57b5fe;Sync Host_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-01-08 627544]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe [2015-12-02 289256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_57b5fe;MessagingService_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_98b51;MessagingService_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-08 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_57b5fe;Kontaktné údaje_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
"

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#4 Příspěvek od Rudy »

Myslel jsem, že dáte log z ADW. No nic, stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Skype\Toolbars
C:\Program Files\McAfee Security Scan\3.11.266
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Admin\AppData\Local\Akamai
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""Akamai NetSession Interface""=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""SunJavaUpdateSched""=-

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
[Resethosts]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zuzz
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 23 led 2016 23:53

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#5 Příspěvek od Zuzz »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2016-01-24 22:07:29
Microsoft Windows 10 Home
System drive C: has 59 GB (20%) free of 299 GB
Total RAM: 3852 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:07:31 PM on 1/24/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main Start Page = https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.1.8.599&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1406755398-1355060213-3156159159-1002\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe -112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AvgAMPS - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll -1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll -100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll -118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll -1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll -100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - Unknown owner - C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll -2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll -102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe -2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll -1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe -101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe -3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe -1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe -101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe -702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe -101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll -1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe -100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe -102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe -104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll -310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe -110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe -101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 12359 bytes

Err:510




c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-24e6-f21d6eaf4d1f /binaryPath="C:\Program Files (x86)\AVG\Av\\"



winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
dwm.exe
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
"C:\Windows\System32\WUDFHost.exe"" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f63339a2-8dd7-4b22-abc9-9943df5b6ceb -SystemEventPortName:HostProcess-6a604d1d-282d-4e50-a7c7-79b192fd1b31 -IoCancelEventPortName:HostProcess-0479f827-ef29-457b-9261-54e56fafb7c2 -NonStateChangingEventPortName:HostProcess-9e5e3f03-7a60-4e4d-9ed9-f9a1779fc4df -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:831f4c2f-bea0-44db-aa52-9dfa8bb72d18 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
""C:\WINDOWS\system32\nvvsvc.exe"
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe

C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
dashost.exe {26422901-b133-4bc8-aa659030d9dc8095}
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
C:\Program Files (x86)\AVG\Av\avgnsa.exe
C:\Program Files (x86)\AVG\Av\avgemca.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"" /c
""C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe"" serviceapp
taskeng.exe {7A14D824-F686-4374-94D8-A659F2B2BF39}
""C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
\??\C:\WINDOWS\system32\conhost.exe 0x4
igfxEM.exe
igfxHK.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe"" -ServerName:SkypeHost.ServerServer

""C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe"" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
""C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
""C:/Program Files/NVIDIA Corporation/Display/nvtray.exe"" -user_has_logged_in 1
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
""C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"" -s
""C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe"" /FORPCEE4
""C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe "
C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
/TRAYONLY
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
"C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe"" /systemstartup
""C:\Program Files\iPod\bin\iPodService.exe"
/fmw.trayonly
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe

fontdrvhost.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
ctfmon.exe

C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup

C:\Users\Admin\Downloads\RSITx64.exe

Err:510

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001Core.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1406755398-1355060213-3156159159-1001UA.job - C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

Err:510

ProfilePath - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l472txsh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={712A66AB ... 2014-12-11 14:14:17&v=4.2.2.128&pid=wtu&sg=&sap=hp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
""Description""=iTunes Detector Plug-in
""Path""=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
""Description""=
""Path""=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29]
""Description""=Intel IPT WebApi plugin
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
""Description""=This plugin updates Intel WebAPI component
""Path""=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
""Description""=NVIDIA stereo images plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
""Description""=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
""Path""=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
""Description""=Google Update
""Path""=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
""Description""=Handles PDFs in-place in Firefox
""Path""=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
""Description""=Adobe® Flash® Player 20.0.0.286 Plugin
""Path""=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
""Description""=Java™ Deployment Toolkit
""Path""=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
""Description""=Oracle® Next Generation Java™ Plug-In
""Path""=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
""Description""=Ag Player Plugin
""Path""=C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-13 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-13 210856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""RtHDVCpl""=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-06-25 13626072]
""RtHDVBg_Dolby""=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-06-05 1311304]
""IAStorIcon""=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-05-08 36352]
""Energy Manager""=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-10-13 15794160]
""Lenovo Utility""=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-10-13 80368]
""IgfxTray""=C:\Windows\system32\igfxtray.exe [2015-07-17 396688]
""NvBackend""=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-11-12 2757424]
""ShadowPlay""=C:\WINDOWS\system32\nvspcap64.dll [2015-11-12 1828160]
""SynTPEnh""=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-12 3945672]
""iTunesHelper""=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-17 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""Dropbox Update""=C:\Users\Admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 134512]
""Akamai NetSession Interface""=C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe []
""OneDrive""=C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-24 551112]
""Skype""=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17 50378880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""SunJavaUpdateSched""=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
""AVG_UI""=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-01-08 25512]
""HP Software Update""=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
""AvgUi""=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-01-12 179624]
""QuickTime Task""=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
""AppInit_DLLs""=""C:\Windows\system32\nvinitx.dll "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled""=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
""midimapper""=midimap.dll
""msacm.imaadpcm""=imaadp32.acm
""msacm.l3acm""=C:\Windows\System32\l3codeca.acm
""msacm.msadpcm""=msadp32.acm
""msacm.msg711""=msg711.acm
""msacm.msgsm610""=msgsm32.acm
""vidc.i420""=iyuv_32.dll
""vidc.iyuv""=iyuv_32.dll
""vidc.mrle""=msrle32.dll
""vidc.msvc""=msvidc32.dll
""vidc.uyvy""=msyuv.dll
""vidc.yuy2""=msyuv.dll
""vidc.yvu9""=tsbyuv.dll
""vidc.yvyu""=msyuv.dll
""wavemapper""=msacm32.drv
""wave""=wdmaud.drv
""midi""=wdmaud.drv
""mixer""=wdmaud.drv
""aux""=wdmaud.drv
""wave1""=wdmaud.drv
""midi1""=wdmaud.drv
""mixer1""=wdmaud.drv
""aux1""=wdmaud.drv
""MSVideo8""=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe ""%1"" %*

======List of files/folders created in the last 1 month======

2016-01-24 21:18:37 ----D---- C:\_OTM
2016-01-24 17:28:20 ----D---- C:\Program Files (x86)\LibreOffice 5
2016-01-24 16:00:18 ----D---- C:\AdwCleaner
2016-01-23 23:58:35 ----D---- C:\rsit
2016-01-23 23:58:35 ----D---- C:\Program Files\trend micro
2016-01-13 10:57:14 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-13 10:57:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-01-13 10:57:05 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 10:57:04 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-01-13 10:57:03 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-01-13 10:56:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-01-13 10:56:58 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-01-13 10:56:54 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 10:56:53 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 10:56:52 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-01-13 10:56:51 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-01-13 10:56:50 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-01-13 10:56:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\mfps.dll
2016-01-13 10:56:48 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 10:56:47 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 10:56:46 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\quartz.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 10:56:45 ----A---- C:\WINDOWS\system32\evr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-01-13 10:56:44 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\invagent.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-01-13 10:56:44 ----A---- C:\WINDOWS\system32\devinv.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 10:56:43 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 10:56:42 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\schannel.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 10:56:41 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\mftranscode.dll
2016-01-13 10:56:40 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\winload.exe
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\qedit.dll
2016-01-13 10:56:39 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\omadmclient.exe
2016-01-13 10:56:38 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-01-13 10:56:37 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-01-13 10:56:37 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 10:56:36 ----A---- C:\WINDOWS\system32\aepic.dll
2016-01-08 12:03:25 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2015-12-28 17:41:48 ----D---- C:\Program Files\iPod
2015-12-28 17:41:48 ----D---- C:\Program Files (x86)\iTunes
2015-12-28 17:41:48 ----AD---- C:\Program Files\iTunes
2015-12-25 19:05:14 ----D---- C:\WINDOWS\system32\SleepStudy

======List of files/folders modified in the last 1 month======

2016-01-24 22:05:23 ----D---- C:\WINDOWS\Prefetch
2016-01-24 22:04:59 ----D---- C:\WINDOWS\Temp
2016-01-24 22:04:13 ----D---- C:\Users\Admin\AppData\Roaming\Dropbox
2016-01-24 22:03:34 ----D---- C:\Program Files\McAfee Security Scan
2016-01-24 22:03:26 ----D---- C:\WINDOWS\System32
2016-01-24 22:03:26 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-01-24 21:43:02 ----D---- C:\ProgramData\MFAData
2016-01-24 21:39:14 ----D---- C:\ProgramData\NVIDIA
2016-01-24 21:38:17 ----D---- C:\WINDOWS\system32\sru
2016-01-24 21:31:10 ----D---- C:\WINDOWS\system32\drivers\etc
2016-01-24 21:18:41 ----D---- C:\WINDOWS\Tasks
2016-01-24 21:18:40 ----RD---- C:\Program Files (x86)\Skype
2016-01-24 17:37:37 ----D---- C:\WINDOWS\Microsoft.NET
2016-01-24 17:32:48 ----SHD---- C:\WINDOWS\Installer
2016-01-24 17:29:30 ----RD---- C:\WINDOWS\assembly
2016-01-24 17:29:30 ----HD---- C:\Config.Msi
2016-01-24 17:28:46 ----RSD---- C:\WINDOWS\Fonts
2016-01-24 17:28:20 ----RD---- C:\Program Files (x86)
2016-01-24 17:27:56 ----AD---- C:\Program Files (x86)\LibreOffice 4
2016-01-24 17:27:07 ----D---- C:\WINDOWS\system32\drivers
2016-01-24 17:25:54 ----SHD---- C:\System Volume Information
2016-01-24 16:02:53 ----HD---- C:\ProgramData
2016-01-24 16:02:53 ----D---- C:\Program Files\Common Files
2016-01-24 16:02:49 ----D---- C:\Program Files (x86)\Common Files
2016-01-24 02:03:56 ----D---- C:\WINDOWS\AppReadiness
2016-01-24 02:03:55 ----HD---- C:\Program Files\WindowsApps
2016-01-24 00:52:17 ----D---- C:\WINDOWS\system32\config
2016-01-23 23:58:35 ----RD---- C:\Program Files
2016-01-21 17:40:54 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2016-01-21 12:30:34 ----D---- C:\WINDOWS\system32\NDF
2016-01-21 12:21:41 ----D---- C:\ProgramData\Skype
2016-01-20 20:55:16 ----D---- C:\WINDOWS\SysWOW64
2016-01-15 21:11:03 ----D---- C:\WINDOWS\system32\DriverStore
2016-01-14 09:57:54 ----D---- C:\WINDOWS\INF
2016-01-14 09:57:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 09:51:07 ----D---- C:\WINDOWS\WinSxS
2016-01-14 09:50:10 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\Boot
2016-01-13 22:38:04 ----D---- C:\WINDOWS\system32\appraiser
2016-01-13 22:38:04 ----D---- C:\WINDOWS\AppPatch
2016-01-13 20:39:41 ----D---- C:\WINDOWS\CbsTemp
2016-01-13 20:37:22 ----D---- C:\WINDOWS\system32\MRT
2016-01-13 20:29:22 ----A---- C:\WINDOWS\system32\MRT.exe
2016-01-13 10:48:54 ----D---- C:\WINDOWS\system32\catroot2
2016-01-03 02:40:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-12-30 13:30:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-29 21:18:41 ----D---- C:\WINDOWS\SYSWOW64\config
2015-12-28 17:41:48 ----D---- C:\Program Files\Common Files\Apple
2015-12-28 17:02:44 ----D---- C:\WINDOWS\Logs
2015-12-26 11:37:28 ----D---- C:\WINDOWS\system32\WDI
2015-12-25 18:57:47 ----D---- C:\WINDOWS\debug
2015-12-25 18:57:37 ----D---- C:\WINDOWS\system32\restore
2015-12-25 08:38:52 ----D---- C:\WINDOWS\appcompat

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2015-08-20 298416]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2015-08-14 398256]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2015-12-04 258480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-05-08 679920]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-07-23 31376]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-11-06 184240]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2015-12-04 315312]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem9.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2014-10-13 35600]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 ibtusb;@oem11.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2015-07-14 263952]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-17 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-25 3462616]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-15 27032]
R3 MEIx64;@oem20.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-05-16 64624]
R3 NETwNb64;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\WINDOWS\System32\drivers\Netwbw02.sys [2015-10-30 3485696]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-11-12 19760]
R3 nvvad_WaveExtensible;@oem26.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 rt640x64;@oem19.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-22 886528]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-10-12 42696]
R3 SynTP;@oem4.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-10-12 618696]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2015-09-09 23152]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-24 117248]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-15 39320]
S3 IntcDAud;@oem22.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-05-08 442368]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2013-05-09 260680]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-01-08 3906568]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-01-12 1048488]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-01-08 583936]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-11-12 1156400]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-05-08 15344]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-17 351120]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-16 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-16 169432]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-11-12 1872688]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-11-12 5915440]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 OneSyncSvc_d8b41;Sync Host_d8b41; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-10-12 246472]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-17 283024]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2015-10-30 37256]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-17 644880]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-11-12 8133424]
R3 PimIndexMaintenanceSvc_d8b41;Kontaktné údaje_d8b41; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-16 366552]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_57b5fe;Sync Host_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_98b51;Sync Host_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-01-08 627544]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe []
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_57b5fe;MessagingService_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_98b51;MessagingService_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d8b41;MessagingService_d8b41; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-08 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_57b5fe;Kontaktné údaje_57b5fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_98b51;Kontaktné údaje_98b51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
"



otm

All processes killed
========== FILES ==========
C:\Program Files (x86)\Skype\Toolbars\PNRSvc folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64 folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\FirefoxAddOn folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars\AutoUpdate folder moved successfully.
C:\Program Files (x86)\Skype\Toolbars folder moved successfully.
C:\Program Files\McAfee Security Scan\3.11.266\sacoredata folder moved successfully.
Folder move failed. C:\Program Files\McAfee Security Scan\3.11.266 scheduled to be moved on reboot.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Users\Admin\AppData\Local\Akamai\Logs\dump folder moved successfully.
C:\Users\Admin\AppData\Local\Akamai\Logs folder moved successfully.
C:\Users\Admin\AppData\Local\Akamai\Languages folder moved successfully.
C:\Users\Admin\AppData\Local\Akamai\Cache folder moved successfully.
C:\Users\Admin\AppData\Local\Akamai folder moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk moved successfully.
File/Folder C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat not found.
File/Folder C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat not found.
========== REGISTRY ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"Akamai NetSession Interface" not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\"SunJavaUpdateSched" not found.
========== SERVICES/DRIVERS ==========
Service c2cautoupdatesvc stopped successfully!
Service c2cautoupdatesvc deleted successfully!
Service c2cpnrsvc stopped successfully!
Service c2cpnrsvc deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: Admin
->Temp folder emptied: 101232524 bytes
->Temporary Internet Files folder emptied: 173198280 bytes
->Java cache emptied: 48020 bytes
->FireFox cache emptied: 356176255 bytes
->Google Chrome cache emptied: 7093844 bytes
->Flash cache emptied: 5726 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default.migrated

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 35160468 bytes
RecycleBin emptied: 1614147300 bytes

Total Files Cleaned = 2,181.00 mb


[EMPTYFLASH]

User: Admin
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Default.migrated

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTM by OldTimer - Version 3.1.21.0 log created on 01242016_211837

Files moved on Reboot...
C:\Program Files\McAfee Security Scan\3.11.266 folder moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.

Registry entries deleted on Reboot...

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#6 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zuzz
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 23 led 2016 23:53

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#7 Příspěvek od Zuzz »

je to rychlejsie, diky

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: strasne pomaly, niekedy treba restart aby sa dalo prihla

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět