Stránka 1 z 1

Kontrola logu, přehřívání pevného disku a využití na 100%.

Napsal: 14 úno 2016 09:11
od Harmony
Logfile of random's system information tool 1.10 (written by random/random)
Run by Kuchar at 2016-02-14 09:10:25
Microsoft Windows 8.1
System drive C: has 859 GB (95%) free of 905 GB
Total RAM: 3962 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:10:47, on 14/02/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\USB Camera2\VM332STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\SysWOW64\RunDll32.exe
C:\Program Files\trend micro\Kuchar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332STI.EXE
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [WindowsDriverScan86] C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk
O4 - HKLM\..\Run: [WindowsDriverScan64] C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - Global Startup: Bluetooth.lnk = ?
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem32.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10748 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
dashost.exe {8d597963-6e9b-4094-9d2da7cd54bb4abc}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d283df73-584a-4c08-b5cb-8a14a440e987 -SystemEventPortName:HostProcess-13ada7d0-1646-4f71-a595-633e8d5b7f24 -IoCancelEventPortName:HostProcess-f63268de-7341-4bb4-8358-4b79e30bc9c4 -NonStateChangingEventPortName:HostProcess-c8b62be7-efb8-455c-9aaf-622aa06a0888 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c3129981-50de-4812-8041-c3ea344e69d0 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\System32\msdtc.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{48DA6741-1BF0-4A44-8325-293086C79077}
C:\WINDOWS\system32\WLANExt.exe 793143993024
\??\C:\WINDOWS\system32\conhost.exe 0x4

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskeng.exe {96099068-D2DD-4568-B795-BC947EEF5CF4}
taskhostex.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
igfxEM.exe
igfxTray.exe
igfxHK.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"

"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera2\VM332STI.EXE"
"C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe -Embedding
"C:\WINDOWS\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
taskhost.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"C:\WINDOWS\system32\lpkinstall.exe" 96b66775-4725-48fb-9fa2-f3f1ec8683f7
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3740.0.543712088\849148569" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:822062411
"C:\WINDOWS\system32\taskmgr.exe" /4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledDelayTcpRace/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3740.2.508777835\964106460" --font-cache-shared-handle=2596 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledDelayTcpRace/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3740.4.1602080215\2100935623" --font-cache-shared-handle=4624 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledDelayTcpRace/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3740.5.557816128\307964653" --font-cache-shared-handle=4080 /prefetch:673131151
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 592 600 65536 596
wmiadap.exe /R /T
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\wuauclt.exe" /RunHandlerComServer
"C:\Users\Kuchar\Downloads\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-24 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-31 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-24 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-31 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-31 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-31 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-23 1793736]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-09-14 12921488]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-09-14 1214608]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-08-27 395168]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe []
"Persistence"=C:\windows\system32\igfxpers.exe []
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-09-20 656896]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-12-01 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-12-01 191544]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-09-17 2874168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-29 1011200]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332STI.EXE [2012-03-20 548864]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-12-31 6133520]
"WindowsDriverScan86"=C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk [2014-08-10 1501]
"WindowsDriverScan64"=C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk [2014-08-10 1419]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-30 594992]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-14 12:52:34 ----SHD---- C:\Recovery
2016-02-14 12:52:22 ----DC---- C:\WINDOWS\Panther
2016-02-14 12:51:49 ----D---- C:\Windows.old
2016-02-14 12:50:31 ----A---- C:\WINDOWS\system32\fhcpl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-02-14 12:50:06 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-02-14 12:50:06 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-02-14 12:49:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasser.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasmxs.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasdiag.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rascfg.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\QSVRMGMT.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\QSHVHOST.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WSDMon.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WSDApi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WinSCard.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vpnike.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasser.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasmxs.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasdiag.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rascfg.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\QSVRMGMT.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\QSHVHOST.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\eventcls.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\splwow64.exe
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-02-14 12:48:01 ----D---- C:\WINDOWS\SYSWOW64\drivers\sk-SK
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\sk
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\drivers\sk-SK
2016-02-14 12:48:01 ----D---- C:\WINDOWS\sk-SK
2016-02-14 12:41:13 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\quartz.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfps.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\evr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\devenum.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-02-14 12:40:41 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2016-02-14 12:40:41 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2016-02-14 12:40:36 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-02-14 12:40:36 ----A---- C:\WINDOWS\system32\notepad.exe
2016-02-14 12:40:36 ----A---- C:\WINDOWS\notepad.exe
2016-02-14 12:40:31 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2016-02-14 12:40:22 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2016-02-14 12:40:22 ----A---- C:\WINDOWS\system32\authz.dll
2016-02-14 12:40:17 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-02-14 12:40:17 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-02-14 12:39:51 ----A---- C:\WINDOWS\system32\msiexec.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\system32\msi.dll
2016-02-14 12:39:45 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-02-14 12:39:45 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-02-14 12:39:39 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-02-14 12:39:39 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-02-14 12:39:27 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-02-14 12:39:27 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2016-02-14 12:39:05 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-02-14 12:39:05 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-14 12:38:47 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-02-14 12:38:47 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-14 12:38:27 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-14 12:38:27 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-14 12:38:20 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-02-14 12:38:13 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 12:38:13 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 12:37:56 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2016-02-14 12:37:48 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-14 12:37:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-02-14 12:37:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-14 12:37:27 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-02-14 12:37:27 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-02-14 12:37:22 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2016-02-14 12:37:13 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-02-14 12:37:13 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eappgnui.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-02-14 12:36:55 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\UtcResources.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\tdh.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-02-14 12:36:30 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-02-14 12:36:30 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-02-14 12:36:12 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-02-14 12:36:12 ----A---- C:\WINDOWS\system32\comctl32.dll
2016-02-14 12:36:07 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-02-14 12:36:07 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-02-14 12:36:02 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-02-14 12:36:02 ----A---- C:\WINDOWS\system32\ole32.dll
2016-02-14 12:35:58 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2016-02-14 12:35:58 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-02-14 12:35:58 ----A---- C:\WINDOWS\system32\clfsw32.dll
2016-02-14 12:35:52 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2016-02-14 12:35:52 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2016-02-14 12:35:52 ----A---- C:\WINDOWS\system32\tracerpt.exe
2016-02-14 12:35:52 ----A---- C:\WINDOWS\system32\sechost.dll
2016-02-14 12:35:44 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-02-14 12:35:44 ----A---- C:\WINDOWS\system32\authui.dll
2016-02-14 12:35:39 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2016-02-14 12:35:27 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-02-14 12:35:27 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-02-14 12:35:21 ----A---- C:\WINDOWS\SYSWOW64\WinSync.dll
2016-02-14 12:35:21 ----A---- C:\WINDOWS\system32\WinSync.dll
2016-02-14 12:35:16 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-02-14 12:35:16 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-02-14 12:35:12 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-14 12:35:12 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-14 12:35:09 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-02-14 12:35:09 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-02-14 12:35:01 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2016-02-14 12:34:56 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-02-14 12:34:49 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-02-14 12:34:30 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2016-02-14 12:34:21 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\system32\catsrvut.dll
2016-02-14 12:34:13 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-02-14 12:34:13 ----A---- C:\WINDOWS\system32\wininit.exe
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-02-14 12:33:19 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-02-14 12:33:19 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\mfc42u.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\mfc42.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-02-14 12:32:58 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-02-14 12:32:58 ----A---- C:\WINDOWS\system32\qedit.dll
2016-02-14 12:32:40 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-02-14 12:32:37 ----A---- C:\WINDOWS\system32\NcdAutoSetup.dll
2016-02-14 12:32:33 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-02-14 12:32:26 ----A---- C:\WINDOWS\system32\lsm.dll
2016-02-14 12:32:20 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2016-02-14 12:32:13 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-02-14 12:32:09 ----A---- C:\WINDOWS\SYSWOW64\rgb9rast.dll
2016-02-14 12:31:55 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-02-14 12:31:55 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\certcli.dll
2016-02-14 12:31:33 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-02-14 12:31:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-02-14 12:31:18 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-02-14 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2016-02-14 12:31:11 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2016-02-14 12:31:06 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-14 12:31:06 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-14 12:31:02 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2016-02-14 12:31:02 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\localspl.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\compstui.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\winresume.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\winload.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2016-02-14 12:30:03 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-02-14 12:30:03 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-02-14 12:29:46 ----A---- C:\WINDOWS\system32\services.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuwebv.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wups2.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wups.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wudriver.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wucltux.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuapp.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-02-14 12:29:04 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-02-14 12:29:04 ----A---- C:\WINDOWS\system32\SRH.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\winshfhc.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2016-02-14 12:28:24 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\taskeng.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\schtasks.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-02-14 12:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-02-14 12:28:20 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-02-14 12:28:17 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2016-02-14 12:28:17 ----A---- C:\WINDOWS\system32\calc.exe
2016-02-14 12:28:04 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\system32\WebClnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\system32\davclnt.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\wuaext.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-02-14 12:27:37 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-02-14 12:27:33 ----A---- C:\WINDOWS\system32\win32k.sys
2016-02-14 12:27:30 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2016-02-14 12:27:30 ----A---- C:\WINDOWS\system32\pku2u.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\wow32.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\user.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\setup16.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\instnm.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\wow64.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\sysmain.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2016-02-14 12:26:56 ----A---- C:\WINDOWS\SYSWOW64\InkEd.dll
2016-02-14 12:26:56 ----A---- C:\WINDOWS\system32\InkEd.dll
2016-02-14 12:26:49 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-02-14 12:26:49 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-02-14 12:26:36 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2016-02-14 12:25:31 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\msrating.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\inseng.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ieui.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-02-14 12:23:54 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-02-14 12:23:54 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-02-14 12:23:50 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-14 12:23:45 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2016-02-14 12:23:45 ----A---- C:\WINDOWS\system32\scesrv.dll
2016-02-14 12:23:42 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll
2016-02-14 12:23:40 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\tquery.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssvp.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssphtb.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssph.dll
2016-02-14 12:21:52 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-14 12:21:52 ----A---- C:\WINDOWS\explorer.exe
2016-02-14 12:21:50 ----A---- C:\WINDOWS\system32\consent.exe
2016-02-14 12:21:48 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2016-02-14 12:21:48 ----A---- C:\WINDOWS\system32\untfs.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\user32.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\schannel.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-02-14 12:21:20 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2016-02-14 12:21:20 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-02-14 12:21:18 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2016-02-14 12:21:18 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2016-02-14 12:21:14 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2016-02-14 12:21:14 ----A---- C:\WINDOWS\system32\poqexec.exe
2016-02-14 12:21:07 ----A---- C:\WINDOWS\SYSWOW64\rastapi.dll
2016-02-14 12:21:07 ----A---- C:\WINDOWS\system32\rastapi.dll
2016-02-14 12:21:03 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2016-02-14 12:21:03 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2016-02-14 12:20:59 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\shacct.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-02-14 12:20:37 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-02-14 12:20:37 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-02-14 12:20:35 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2016-02-14 12:20:35 ----A---- C:\WINDOWS\system32\photowiz.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\system32\appidsvc.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\system32\appidapi.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\wer.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\Faultrep.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\EncDump.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\ci.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-14 12:17:34 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-02-14 12:17:34 ----D---- C:\Program Files (x86)\MSBuild
2016-02-14 12:17:33 ----D---- C:\Program Files\Reference Assemblies
2016-02-14 12:17:33 ----D---- C:\Program Files\MSBuild
2016-02-14 12:16:49 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-14 12:16:48 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-02-14 12:16:47 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-14 12:16:45 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-14 12:16:29 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2016-02-14 12:16:29 ----A---- C:\WINDOWS\system32\sdbinst.exe
2016-02-14 09:10:26 ----D---- C:\Program Files\trend micro
2016-02-14 09:10:25 ----D---- C:\rsit
2016-02-14 09:08:47 ----D---- C:\WINDOWS\LastGood
2016-02-14 08:59:47 ----D---- C:\Users\Kuchar\AppData\Roaming\Identities
2016-02-14 08:59:26 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-02-14 04:29:40 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2016-02-14 04:08:58 ----SD---- C:\Users\Kuchar\AppData\Roaming\Microsoft
2016-02-14 03:59:30 ----D---- C:\Program Files (x86)\USB Camera2
2016-02-14 03:59:19 ----D---- C:\Program Files\Realtek
2016-02-14 03:59:18 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2016-02-14 03:59:06 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-02-14 03:58:30 ----D---- C:\ProgramData\NVIDIA Corporation
2016-02-14 03:58:20 ----D---- C:\Program Files\NVIDIA Corporation
2016-02-14 03:58:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-02-14 03:57:55 ----D---- C:\Program Files\Synaptics
2016-02-14 03:57:45 ----D---- C:\Program Files (x86)\Intel
2016-02-14 03:57:43 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2016-02-14 03:57:43 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2016-02-14 03:55:11 ----D---- C:\WINDOWS\Prefetch
2016-02-14 00:27:44 ----D---- C:\Program Files\Speccy
2016-02-13 16:19:49 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-01-25 03:26:33 ----D---- C:\Users\Kuchar\AppData\Roaming\BrawlhallaAir
2016-01-18 03:12:51 ----D---- C:\Users\Kuchar\AppData\Roaming\WinRAR
2016-01-18 03:12:36 ----D---- C:\Program Files\WinRAR
2016-01-16 22:23:54 ----A---- C:\WINDOWS\wininit.ini
2016-01-16 22:16:49 ----D---- C:\Users\Kuchar\AppData\Roaming\Opera Software
2016-01-16 22:08:47 ----D---- C:\ProgramData\Spybot - Search & Destroy

======List of files/folders modified in the last 1 month======

2016-02-14 12:50:43 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-02-14 12:49:55 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-02-14 12:49:55 ----D---- C:\WINDOWS\system32\setup
2016-02-14 12:48:01 ----D---- C:\WINDOWS\WinStore
2016-02-14 12:48:01 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-02-14 12:48:01 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-02-14 12:48:01 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\slmgr
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\migwiz
2016-02-14 12:48:01 ----D---- C:\WINDOWS\servicing
2016-02-14 12:48:01 ----D---- C:\WINDOWS\PolicyDefinitions
2016-02-14 12:48:01 ----D---- C:\Program Files\Windows Photo Viewer
2016-02-14 12:48:01 ----D---- C:\Program Files\Windows Mail
2016-02-14 12:48:01 ----D---- C:\Program Files\Windows Journal
2016-02-14 12:48:01 ----D---- C:\Program Files\Windows Defender
2016-02-14 12:48:01 ----D---- C:\Program Files\Internet Explorer
2016-02-14 12:48:01 ----D---- C:\Program Files\Common Files\System
2016-02-14 12:48:01 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-02-14 12:48:01 ----D---- C:\Program Files (x86)\Windows Mail
2016-02-14 12:48:01 ----D---- C:\Program Files (x86)\Windows Defender
2016-02-14 12:48:01 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-14 12:48:00 ----D---- C:\WINDOWS\system32\wbem
2016-02-14 12:48:00 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-02-14 12:48:00 ----D---- C:\WINDOWS\FileManager
2016-02-14 12:39:31 ----D---- C:\WINDOWS\system32\Boot
2016-02-14 12:38:32 ----RD---- C:\WINDOWS\ToastData
2016-02-14 12:34:01 ----RSD---- C:\WINDOWS\Fonts
2016-02-14 12:31:20 ----D---- C:\WINDOWS\apppatch
2016-02-14 12:30:52 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-02-14 12:27:27 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-02-14 12:23:49 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-02-14 12:20:18 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-02-14 09:10:26 ----RD---- C:\Program Files
2016-02-14 09:10:22 ----D---- C:\WINDOWS\CbsTemp
2016-02-14 09:10:08 ----SHD---- C:\System Volume Information
2016-02-14 09:08:58 ----D---- C:\WINDOWS\system32\restore
2016-02-14 09:08:54 ----D---- C:\WINDOWS\Temp
2016-02-14 09:08:48 ----RD---- C:\WINDOWS\System32
2016-02-14 09:08:47 ----D---- C:\WINDOWS\system32\drivers
2016-02-14 09:08:47 ----D---- C:\Windows
2016-02-14 09:08:46 ----D---- C:\WINDOWS\Inf
2016-02-14 09:08:40 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-14 09:06:02 ----HD---- C:\Program Files\WindowsApps
2016-02-14 09:06:01 ----D---- C:\WINDOWS\AppReadiness
2016-02-14 09:04:27 ----HD---- C:\$Windows.~BT
2016-02-14 09:03:30 ----D---- C:\WINDOWS\system32\config
2016-02-14 09:00:52 ----SHD---- C:\$Recycle.Bin
2016-02-14 09:00:00 ----D---- C:\WINDOWS\system32\sru
2016-02-14 08:59:06 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-14 08:56:33 ----D---- C:\WINDOWS\system32\wdi
2016-02-14 04:30:35 ----D---- C:\WINDOWS\debug
2016-02-14 04:30:13 ----D---- C:\WINDOWS\Registration
2016-02-14 04:30:03 ----D---- C:\WINDOWS\system32\Tasks
2016-02-14 04:29:49 ----D---- C:\WINDOWS\system32\LogFiles
2016-02-14 04:29:48 ----HD---- C:\WINDOWS\system32\GroupPolicyUsers
2016-02-14 04:27:49 ----D---- C:\WINDOWS\system32\catroot2
2016-02-14 04:27:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-14 04:27:10 ----D---- C:\WINDOWS\SysWOW64
2016-02-14 04:27:10 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-02-14 04:26:49 ----RSD---- C:\WINDOWS\Media
2016-02-14 04:25:50 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-02-14 04:20:26 ----D---- C:\WINDOWS\SYSWOW64\NV
2016-02-14 04:20:26 ----D---- C:\WINDOWS\system32\NV
2016-02-14 04:15:46 ----HD---- C:\WINDOWS\Installer
2016-02-14 04:15:46 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-02-14 04:15:46 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2016-02-14 04:15:46 ----D---- C:\WINDOWS\system32\Sysprep
2016-02-14 04:15:46 ----D---- C:\WINDOWS\system32\AutoUpdateLicense
2016-02-14 04:15:45 ----D---- C:\WINDOWS\Tasks
2016-02-14 04:15:41 ----D---- C:\WINDOWS\WinSxS
2016-02-14 04:12:56 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\SDA
2016-02-14 04:12:53 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-02-14 04:12:53 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-02-14 04:12:53 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-02-14 04:12:50 ----HD---- C:\WINDOWS\system32\WLANProfiles
2016-02-14 04:12:49 ----D---- C:\WINDOWS\system32\WCN
2016-02-14 04:12:49 ----D---- C:\WINDOWS\system32\spool
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\sk-SK
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\oobe
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\NDF
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\MUI
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\MRT
2016-02-14 04:12:45 ----D---- C:\WINDOWS\system32\IME
2016-02-14 04:12:45 ----D---- C:\WINDOWS\system32\en-US
2016-02-14 04:11:40 ----D---- C:\WINDOWS\Migration
2016-02-14 04:11:39 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-14 04:11:37 ----D---- C:\WINDOWS\Help
2016-02-14 04:11:37 ----D---- C:\WINDOWS\DigitalLocker
2016-02-14 04:11:36 ----RD---- C:\WINDOWS\assembly
2016-02-14 04:11:35 ----SD---- C:\ProgramData\Microsoft
2016-02-14 04:11:35 ----RD---- C:\Users
2016-02-14 04:11:35 ----HD---- C:\ProgramData
2016-02-14 04:11:35 ----D---- C:\ProgramData\PRICache
2016-02-14 04:11:32 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-02-14 04:11:32 ----RD---- C:\Program Files (x86)
2016-02-14 04:11:32 ----D---- C:\Program Files (x86)\Windows Media Player
2016-02-14 04:11:29 ----D---- C:\Program Files (x86)\Common Files
2016-02-14 04:11:26 ----SHD---- C:\Program Files\Windows Sidebar
2016-02-14 04:11:26 ----D---- C:\Program Files\Windows Media Player
2016-02-14 04:11:25 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-14 04:11:24 ----D---- C:\Program Files\Common Files
2016-02-14 04:10:18 ----D---- C:\WINDOWS\system32\Recovery
2016-02-14 04:06:15 ----D---- C:\WINDOWS\Logs
2016-02-14 03:59:30 ----D---- C:\WINDOWS\twain_32
2016-02-14 03:59:30 ----D---- C:\WINDOWS\System
2016-02-14 03:57:50 ----D---- C:\WINDOWS\system32\catroot
2016-02-14 02:17:37 ----D---- C:\WINDOWS\AUInstallAgent
2016-02-14 00:33:54 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-13 22:56:24 ----D---- C:\Program Files (x86)\Steam
2016-02-13 22:17:22 ----D---- C:\Users\Kuchar\AppData\Roaming\TS3Client
2016-02-07 23:54:29 ----D---- C:\Users\Kuchar\AppData\Roaming\.minecraft
2016-02-06 06:55:35 ----D---- C:\ProgramData\Oracle
2016-02-06 06:26:15 ----D---- C:\Program Files (x86)\Java
2016-02-06 06:23:33 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-01-23 22:04:19 ----D---- C:\ProgramData\McAfee
2016-01-23 22:04:19 ----D---- C:\Program Files (x86)\McAfee
2016-01-23 22:04:10 ----D---- C:\Program Files\Common Files\mcafee
2016-01-23 22:01:15 ----HD---- C:\WINDOWS\ELAMBKUP
2016-01-17 21:12:28 ----RD---- C:\Program Files (x86)\Skype
2016-01-16 23:13:25 ----D---- C:\Program Files (x86)\Google
2016-01-16 22:10:59 ----D---- C:\Program Files\Common Files\AV
2016-01-16 21:27:12 ----D---- C:\Users\Kuchar\AppData\Roaming\Skype
2016-01-16 21:20:00 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-24 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-24 274808]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2012-12-01 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-02-23 31560]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-24 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-12-31 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-12-31 449992]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-24 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-24 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-24 153744]
R3 ACPIVPC;@oem17.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2012-12-01 33560]
R3 bcbtums;@oem32.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2014-11-21 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-11-21 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2016-02-14 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-11-21 81920]
R3 btwampfl;@oem32.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-09-14 4083600]
R3 IntcDAud;@oem31.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 JMCR;JMCR; C:\WINDOWS\System32\drivers\jmcr.sys [2012-06-22 174176]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 NETwNe64;@netwew00.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2013-07-08 3344352]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-02-23 13045960]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2016-02-14 167424]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-09-17 43832]
R3 SynTP;@oem9.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-09-17 457528]
R3 usb3Hub;@oem15.inf,%usb3Hub.SVCDESC%;USB-IF USB 3.0 Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [2012-10-10 47072]
R3 vm332avs;@oem2.inf,%USBCamera.DeviceDesc2%;Lenovo Camera2; C:\WINDOWS\System32\Drivers\vm332avs.sys [2012-08-25 981112]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2016-02-14 1201664]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-24 146600]
R2 BcmBtRSupport;@oem32.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2012-10-01 2227992]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-10-22 957816]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-07-18 627504]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-08-16 7168]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-02-04 934216]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-02 1258856]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-07-18 149296]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-23 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-23 144200]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-10-24 194032]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-07-18 272176]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]

-----------------EOF-----------------

Re: Kontrola logu, přehřívání pevného disku a využití na 100

Napsal: 14 úno 2016 11:10
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Kontrola logu, přehřívání pevného disku a využití na 100

Napsal: 14 úno 2016 12:55
od Harmony
Tohle se objevilo, když jsem klikl na cleaning. https://ctrlv.cz/9TJ9

# AdwCleaner v5.033 - Logfile created 14/02/2016 at 12:49:49
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Kuchar - IDEAHL-PC
# Running from : C:\Users\Kuchar\Desktop\adwcleaner_5.033.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Amazon\ABB

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Pokki

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [753 bytes] ##########

Re: Kontrola logu, přehřívání pevného disku a využití na 100

Napsal: 14 úno 2016 17:19
od Rudy
Dejte nový log RSIT.

Re: Kontrola logu, přehřívání pevného disku a využití na 100

Napsal: 14 úno 2016 17:53
od Harmony
Logfile of random's system information tool 1.10 (written by random/random)
Run by Kuchar at 2016-02-14 17:53:42
Microsoft Windows 8.1
System drive C: has 857 GB (95%) free of 905 GB
Total RAM: 3962 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:53:47 PM, on 2/14/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\USB Camera2\VM332STI.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
C:\Program Files (x86)\Steam\GameOverlayUI.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\trend micro\Kuchar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332STI.EXE
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [WindowsDriverScan86] C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk
O4 - HKLM\..\Run: [WindowsDriverScan64] C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - Global Startup: Bluetooth.lnk = ?
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem32.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9082 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 616945513744
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {b2140a8c-dbe5-44eb-941aa0102830f6c5}
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c36fcf67-e66a-44af-a278-f949315e11ff -SystemEventPortName:HostProcess-d05a3f98-3f29-488b-9587-2b18e2faac0b -IoCancelEventPortName:HostProcess-a71a4891-e497-4b60-ad65-ea4738fe2571 -NonStateChangingEventPortName:HostProcess-e421fb60-d3ce-4da0-852b-ecf92476cdc3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5c87cb7d-7653-425e-8823-89a0f0c5b34d -DeviceGroupId:WudfDefaultDevicePool
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
ClassicStartMenu.exe -startup
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Windows\System32\igfxTray.exe"
"C:\WINDOWS\system32\igfxEM.exe" -Embedding
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
igfxHK.exe
"C:\Program Files (x86)\USB Camera2\VM332STI.EXE"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5776.0.1736951204\925471599" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-databases --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledCWNDBootstrap/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5776.3.2065846801\884759330" --font-cache-shared-handle=3932 /prefetch:673131151
taskeng.exe {B16187A5-72C0-4383-B2B3-236BA5717CF1}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Kuchar\AppData\Local\Steam\htmlcache" -steampid=1516 -buildid=1454620878 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="3064.0.768151511\312219005" --font-cache-shared-handle=1304 /prefetch:673131151
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="3064.2.1395143142\579236667" --font-cache-shared-handle=1680 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5776.14.682063032\1239757098" --ppapi-flash-args --lang=cs --device-scale-factor=1 --font-cache-shared-handle=5332 --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe" -steam +clientport 27030 +mat_queue_mode 2 -high -nojoy -threads 4 -nod3d9ex +exec autoexec -freq 60 -processheap
C:\Program Files (x86)\Steam\GameOverlayUI.exe -pid 32 -manuallyclearframes 0
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="3064.19.331014820\1967881662" --font-cache-shared-handle=3860 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-databases --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledCWNDBootstrap/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5776.17.1292063021\559134712" --font-cache-shared-handle=5832 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-databases --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Postperiod_AnswersInSuggest_A4/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledCWNDBootstrap/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Control/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5776.18.972927\1358320511" --font-cache-shared-handle=5396 /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\Kuchar\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-14 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-14 678656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-23 2787264]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-09-14 12921488]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-09-14 1214608]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-08-27 395168]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-12-01 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-12-01 191544]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2015-11-12 161728]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-01-23 1859936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-29 1011200]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332STI.EXE [2012-03-20 548864]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"WindowsDriverScan86"=C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk [2014-08-10 1501]
"WindowsDriverScan64"=C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk [2014-08-10 1419]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-02-14 7139768]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-14 13:19:20 ----D---- C:\WINDOWS\pss
2016-02-14 12:52:34 ----SHD---- C:\Recovery
2016-02-14 12:52:22 ----DC---- C:\WINDOWS\Panther
2016-02-14 12:51:49 ----D---- C:\Windows.old
2016-02-14 12:50:31 ----A---- C:\WINDOWS\system32\fhcpl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2016-02-14 12:50:18 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-02-14 12:50:06 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-02-14 12:50:06 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-02-14 12:49:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasser.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasmxs.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasdiag.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rascfg.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\QSVRMGMT.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\QSHVHOST.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WSDMon.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WSDApi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\WinSCard.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\vpnike.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasser.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasmxs.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasdiag.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rascfg.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\QSVRMGMT.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\QSHVHOST.DLL
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\eventcls.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-02-14 12:49:37 ----A---- C:\WINDOWS\splwow64.exe
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2016-02-14 12:49:35 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-02-14 12:48:01 ----D---- C:\WINDOWS\SYSWOW64\drivers\sk-SK
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\sk
2016-02-14 12:48:01 ----D---- C:\WINDOWS\system32\drivers\sk-SK
2016-02-14 12:48:01 ----D---- C:\WINDOWS\sk-SK
2016-02-14 12:41:13 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-02-14 12:41:13 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\quartz.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfps.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\evr.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\devenum.dll
2016-02-14 12:40:59 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-02-14 12:40:41 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2016-02-14 12:40:41 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2016-02-14 12:40:36 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-02-14 12:40:36 ----A---- C:\WINDOWS\system32\notepad.exe
2016-02-14 12:40:36 ----A---- C:\WINDOWS\notepad.exe
2016-02-14 12:40:31 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2016-02-14 12:40:22 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2016-02-14 12:40:22 ----A---- C:\WINDOWS\system32\authz.dll
2016-02-14 12:40:17 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-02-14 12:40:17 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-02-14 12:40:03 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-02-14 12:39:51 ----A---- C:\WINDOWS\system32\msiexec.exe
2016-02-14 12:39:51 ----A---- C:\WINDOWS\system32\msi.dll
2016-02-14 12:39:45 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-02-14 12:39:45 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-02-14 12:39:39 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-02-14 12:39:39 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-02-14 12:39:27 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-02-14 12:39:27 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-02-14 12:39:25 ----D---- C:\WINDOWS\SYSWOW64\NV
2016-02-14 12:39:25 ----D---- C:\WINDOWS\system32\NV
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2016-02-14 12:39:14 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2016-02-14 12:39:05 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-02-14 12:39:05 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-14 12:38:47 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-02-14 12:38:47 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-02-14 12:38:42 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-14 12:38:27 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-14 12:38:27 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-14 12:38:20 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-02-14 12:38:13 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 12:38:13 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 12:37:56 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2016-02-14 12:37:48 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-02-14 12:37:48 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-14 12:37:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-02-14 12:37:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-14 12:37:27 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-02-14 12:37:27 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-02-14 12:37:22 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2016-02-14 12:37:13 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-02-14 12:37:13 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eappgnui.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-02-14 12:37:09 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2016-02-14 12:37:04 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-02-14 12:36:55 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\UtcResources.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\tdh.dll
2016-02-14 12:36:55 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-02-14 12:36:30 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-02-14 12:36:30 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-02-14 12:36:12 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-02-14 12:36:12 ----A---- C:\WINDOWS\system32\comctl32.dll
2016-02-14 12:36:07 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-02-14 12:36:07 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-02-14 12:36:02 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-02-14 12:36:02 ----A---- C:\WINDOWS\system32\ole32.dll
2016-02-14 12:35:58 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2016-02-14 12:35:58 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-02-14 12:35:58 ----A---- C:\WINDOWS\system32\clfsw32.dll
2016-02-14 12:35:52 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2016-02-14 12:35:52 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2016-02-14 12:35:52 ----A---- C:\WINDOWS\system32\tracerpt.exe
2016-02-14 12:35:52 ----A---- C:\WINDOWS\system32\sechost.dll
2016-02-14 12:35:44 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-02-14 12:35:44 ----A---- C:\WINDOWS\system32\authui.dll
2016-02-14 12:35:39 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2016-02-14 12:35:27 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-02-14 12:35:27 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-02-14 12:35:21 ----A---- C:\WINDOWS\SYSWOW64\WinSync.dll
2016-02-14 12:35:21 ----A---- C:\WINDOWS\system32\WinSync.dll
2016-02-14 12:35:16 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-02-14 12:35:16 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-02-14 12:35:12 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-14 12:35:12 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-14 12:35:09 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-02-14 12:35:09 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-02-14 12:35:01 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2016-02-14 12:34:56 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-02-14 12:34:49 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-02-14 12:34:49 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-02-14 12:34:30 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2016-02-14 12:34:21 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-02-14 12:34:21 ----A---- C:\WINDOWS\system32\catsrvut.dll
2016-02-14 12:34:13 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-02-14 12:34:13 ----A---- C:\WINDOWS\system32\wininit.exe
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2016-02-14 12:34:10 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-02-14 12:34:09 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2016-02-14 12:34:03 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-02-14 12:33:19 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-02-14 12:33:19 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\mfc42u.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\mfc42.dll
2016-02-14 12:33:14 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-02-14 12:33:08 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-02-14 12:32:58 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-02-14 12:32:58 ----A---- C:\WINDOWS\system32\qedit.dll
2016-02-14 12:32:40 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-02-14 12:32:37 ----A---- C:\WINDOWS\system32\NcdAutoSetup.dll
2016-02-14 12:32:33 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-02-14 12:32:26 ----A---- C:\WINDOWS\system32\lsm.dll
2016-02-14 12:32:20 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2016-02-14 12:32:13 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-02-14 12:32:09 ----A---- C:\WINDOWS\SYSWOW64\rgb9rast.dll
2016-02-14 12:31:55 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-02-14 12:31:55 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-02-14 12:31:50 ----A---- C:\WINDOWS\system32\certcli.dll
2016-02-14 12:31:33 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-02-14 12:31:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-02-14 12:31:18 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-02-14 12:31:11 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2016-02-14 12:31:11 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2016-02-14 12:31:06 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-14 12:31:06 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-14 12:31:02 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2016-02-14 12:31:02 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\localspl.dll
2016-02-14 12:30:52 ----A---- C:\WINDOWS\system32\compstui.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-02-14 12:30:44 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\winresume.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\winload.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-14 12:30:30 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2016-02-14 12:30:13 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2016-02-14 12:30:03 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-02-14 12:30:03 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-02-14 12:29:46 ----A---- C:\WINDOWS\system32\services.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuwebv.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wups2.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wups.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wudriver.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wucltux.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuapp.exe
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-02-14 12:29:39 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-02-14 12:29:25 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-02-14 12:29:04 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-02-14 12:29:04 ----A---- C:\WINDOWS\system32\SRH.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\winshfhc.dll
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2016-02-14 12:28:38 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2016-02-14 12:28:24 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\taskeng.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\schtasks.exe
2016-02-14 12:28:24 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-02-14 12:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-02-14 12:28:20 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-02-14 12:28:17 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2016-02-14 12:28:17 ----A---- C:\WINDOWS\system32\calc.exe
2016-02-14 12:28:04 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\system32\WebClnt.dll
2016-02-14 12:28:04 ----A---- C:\WINDOWS\system32\davclnt.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\wuaext.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-02-14 12:27:57 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-02-14 12:27:45 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-02-14 12:27:37 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-02-14 12:27:33 ----A---- C:\WINDOWS\system32\win32k.sys
2016-02-14 12:27:30 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2016-02-14 12:27:30 ----A---- C:\WINDOWS\system32\pku2u.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\wow32.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\user.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\setup16.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\SYSWOW64\instnm.exe
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\wow64.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\sysmain.dll
2016-02-14 12:27:24 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2016-02-14 12:26:56 ----A---- C:\WINDOWS\SYSWOW64\InkEd.dll
2016-02-14 12:26:56 ----A---- C:\WINDOWS\system32\InkEd.dll
2016-02-14 12:26:49 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-02-14 12:26:49 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-02-14 12:26:36 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2016-02-14 12:25:31 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-02-14 12:25:21 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\msrating.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\jscript.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\inseng.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ieui.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-02-14 12:24:48 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-02-14 12:23:54 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-02-14 12:23:54 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-02-14 12:23:50 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-14 12:23:45 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2016-02-14 12:23:45 ----A---- C:\WINDOWS\system32\scesrv.dll
2016-02-14 12:23:42 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll
2016-02-14 12:23:40 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-14 12:23:34 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\tquery.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssvp.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssphtb.dll
2016-02-14 12:23:19 ----A---- C:\WINDOWS\system32\mssph.dll
2016-02-14 12:21:52 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-14 12:21:52 ----A---- C:\WINDOWS\explorer.exe
2016-02-14 12:21:50 ----A---- C:\WINDOWS\system32\consent.exe
2016-02-14 12:21:48 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2016-02-14 12:21:48 ----A---- C:\WINDOWS\system32\untfs.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\user32.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-02-14 12:21:43 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\schannel.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-02-14 12:21:32 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-02-14 12:21:20 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2016-02-14 12:21:20 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-02-14 12:21:18 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2016-02-14 12:21:18 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2016-02-14 12:21:14 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2016-02-14 12:21:14 ----A---- C:\WINDOWS\system32\poqexec.exe
2016-02-14 12:21:07 ----A---- C:\WINDOWS\SYSWOW64\rastapi.dll
2016-02-14 12:21:07 ----A---- C:\WINDOWS\system32\rastapi.dll
2016-02-14 12:21:03 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2016-02-14 12:21:03 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2016-02-14 12:20:59 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\shacct.dll
2016-02-14 12:20:41 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-02-14 12:20:37 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-02-14 12:20:37 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-02-14 12:20:35 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2016-02-14 12:20:35 ----A---- C:\WINDOWS\system32\photowiz.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\system32\appidsvc.dll
2016-02-14 12:20:19 ----A---- C:\WINDOWS\system32\appidapi.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\wer.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\Faultrep.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\EncDump.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\ci.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-02-14 12:20:16 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-14 12:19:32 ----D---- C:\WINDOWS\LastGood
2016-02-14 12:17:34 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-02-14 12:17:34 ----D---- C:\Program Files (x86)\MSBuild
2016-02-14 12:17:33 ----D---- C:\Program Files\Reference Assemblies
2016-02-14 12:17:33 ----D---- C:\Program Files\MSBuild
2016-02-14 12:16:49 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-14 12:16:48 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-02-14 12:16:47 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-14 12:16:45 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-14 12:16:29 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2016-02-14 12:16:29 ----A---- C:\WINDOWS\system32\sdbinst.exe
2016-02-14 12:08:36 ----D---- C:\Program Files (x86)\Java
2016-02-14 11:43:17 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-02-14 11:42:08 ----D---- C:\Users\Kuchar\AppData\Roaming\AVAST Software
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2016-02-14 11:41:44 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2016-02-14 11:41:28 ----A---- C:\WINDOWS\avastSS.scr
2016-02-14 11:40:27 ----D---- C:\Program Files\AVAST Software
2016-02-14 11:28:20 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2016-02-14 11:20:59 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-02-14 11:20:58 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2016-02-14 11:20:57 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2016-02-14 11:20:54 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2016-02-14 11:20:54 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2016-02-14 11:17:35 ----D---- C:\WINDOWS\LastGood.Tmp
2016-02-14 11:16:04 ----D---- C:\ProgramData\Package Cache
2016-02-14 11:15:23 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2016-02-14 11:15:22 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-02-14 11:15:21 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-02-14 11:15:18 ----A---- C:\WINDOWS\system32\nvdispgenco6436175.dll
2016-02-14 11:15:18 ----A---- C:\WINDOWS\system32\nvdispco6436175.dll
2016-02-14 11:03:44 ----D---- C:\Program Files (x86)\VideoLAN
2016-02-14 10:29:09 ----D---- C:\Users\Kuchar\AppData\Roaming\ClassicShell
2016-02-14 10:27:55 ----D---- C:\Program Files\Classic Shell
2016-02-14 09:49:32 ----A---- C:\WINDOWS\system32\perfi005.dat
2016-02-14 09:49:32 ----A---- C:\WINDOWS\system32\perfh005.dat
2016-02-14 09:49:32 ----A---- C:\WINDOWS\system32\perfd005.dat
2016-02-14 09:49:32 ----A---- C:\WINDOWS\system32\perfc005.dat
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\cs
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\drivers\cs-CZ
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\cs
2016-02-14 09:48:26 ----D---- C:\WINDOWS\cs-CZ
2016-02-14 09:48:21 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-02-14 09:29:26 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-02-14 09:10:26 ----D---- C:\Program Files\trend micro
2016-02-14 09:10:25 ----D---- C:\rsit
2016-02-14 08:59:47 ----D---- C:\Users\Kuchar\AppData\Roaming\Identities
2016-02-14 08:59:26 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-02-14 04:29:40 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2016-02-14 04:08:58 ----SD---- C:\Users\Kuchar\AppData\Roaming\Microsoft
2016-02-14 03:59:30 ----D---- C:\Program Files (x86)\USB Camera2
2016-02-14 03:59:19 ----D---- C:\Program Files\Realtek
2016-02-14 03:59:18 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2016-02-14 03:59:06 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-02-14 03:59:06 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-02-14 03:58:30 ----D---- C:\ProgramData\NVIDIA Corporation
2016-02-14 03:58:20 ----D---- C:\Program Files\NVIDIA Corporation
2016-02-14 03:58:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-02-14 03:57:45 ----D---- C:\Program Files (x86)\Intel
2016-02-14 03:57:43 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2016-02-14 03:57:43 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2016-02-14 03:55:11 ----D---- C:\WINDOWS\Prefetch
2016-02-14 00:27:44 ----D---- C:\Program Files\Speccy
2016-02-13 16:19:49 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-01-25 03:26:33 ----D---- C:\Users\Kuchar\AppData\Roaming\BrawlhallaAir
2016-01-18 03:12:51 ----D---- C:\Users\Kuchar\AppData\Roaming\WinRAR
2016-01-18 03:12:36 ----D---- C:\Program Files\WinRAR
2016-01-16 22:23:54 ----A---- C:\WINDOWS\wininit.ini
2016-01-16 22:16:49 ----D---- C:\Users\Kuchar\AppData\Roaming\Opera Software
2016-01-16 22:08:47 ----D---- C:\ProgramData\Spybot - Search & Destroy

======List of files/folders modified in the last 1 month======

2016-02-14 17:52:02 ----D---- C:\Program Files (x86)\Steam
2016-02-14 17:32:17 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-14 17:00:01 ----D---- C:\WINDOWS\system32\sru
2016-02-14 13:45:18 ----D---- C:\WINDOWS\Temp
2016-02-14 13:45:18 ----D---- C:\WINDOWS\Inf
2016-02-14 13:45:18 ----D---- C:\WINDOWS\debug
2016-02-14 13:45:18 ----D---- C:\Windows
2016-02-14 13:39:30 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-02-14 12:49:55 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-02-14 12:49:55 ----D---- C:\WINDOWS\system32\setup
2016-02-14 12:49:49 ----D---- C:\Program Files (x86)\Amazon
2016-02-14 12:39:25 ----D---- C:\WINDOWS\SysWOW64
2016-02-14 12:39:25 ----D---- C:\WINDOWS\System32
2016-02-14 12:39:19 ----D---- C:\ProgramData\NVIDIA
2016-02-14 12:38:32 ----RD---- C:\WINDOWS\ToastData
2016-02-14 12:37:39 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-14 12:36:11 ----D---- C:\WINDOWS\system32\drivers
2016-02-14 12:35:56 ----HD---- C:\ProgramData
2016-02-14 12:34:01 ----RSD---- C:\WINDOWS\Fonts
2016-02-14 12:30:52 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-02-14 12:27:27 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-02-14 12:23:49 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-02-14 12:23:40 ----SHD---- C:\WINDOWS\Installer
2016-02-14 12:23:39 ----D---- C:\Program Files (x86)\Common Files
2016-02-14 12:20:18 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-02-14 12:08:36 ----RD---- C:\Program Files (x86)
2016-02-14 11:54:45 ----RD---- C:\Program Files
2016-02-14 11:46:05 ----D---- C:\Program Files\Lenovo
2016-02-14 11:43:36 ----D---- C:\WINDOWS\system32\Tasks
2016-02-14 11:41:40 ----D---- C:\WINDOWS\WinSxS
2016-02-14 11:40:20 ----D---- C:\ProgramData\AVAST Software
2016-02-14 11:35:21 ----D---- C:\Program Files\Google
2016-02-14 11:35:21 ----D---- C:\Program Files (x86)\Google
2016-02-14 11:25:21 ----D---- C:\WINDOWS\system32\config
2016-02-14 11:15:50 ----RD---- C:\Users
2016-02-14 11:07:10 ----D---- C:\Users\Kuchar\AppData\Roaming\Skype
2016-02-14 10:51:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-14 10:42:31 ----D---- C:\Program Files (x86)\Lenovo
2016-02-14 10:35:50 ----SHD---- C:\System Volume Information
2016-02-14 10:33:08 ----D---- C:\WINDOWS\Tasks
2016-02-14 10:10:20 ----RD---- C:\Program Files (x86)\Skype
2016-02-14 09:52:01 ----D---- C:\WINDOWS\system32\AutoUpdateLicense
2016-02-14 09:49:44 ----D---- C:\WINDOWS\CbsTemp
2016-02-14 09:48:34 ----D---- C:\WINDOWS\WinStore
2016-02-14 09:48:34 ----D---- C:\WINDOWS\servicing
2016-02-14 09:48:34 ----D---- C:\Program Files\Windows Photo Viewer
2016-02-14 09:48:34 ----D---- C:\Program Files\Windows Media Player
2016-02-14 09:48:34 ----D---- C:\Program Files\Windows Mail
2016-02-14 09:48:34 ----D---- C:\Program Files\Windows Journal
2016-02-14 09:48:34 ----D---- C:\Program Files\Windows Defender
2016-02-14 09:48:34 ----D---- C:\Program Files\Internet Explorer
2016-02-14 09:48:34 ----D---- C:\Program Files\Common Files\System
2016-02-14 09:48:34 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-02-14 09:48:34 ----D---- C:\Program Files (x86)\Windows Media Player
2016-02-14 09:48:34 ----D---- C:\Program Files (x86)\Windows Mail
2016-02-14 09:48:34 ----D---- C:\Program Files (x86)\Windows Defender
2016-02-14 09:48:34 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\winrm
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-02-14 09:48:28 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-14 09:48:26 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-02-14 09:48:26 ----D---- C:\WINDOWS\SYSWOW64\Com
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\winrm
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\Sysprep
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\slmgr
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\oobe
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\migwiz
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\migration
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-14 09:48:26 ----D---- C:\WINDOWS\system32\Boot
2016-02-14 09:48:26 ----D---- C:\WINDOWS\PolicyDefinitions
2016-02-14 09:48:26 ----D---- C:\WINDOWS\IME
2016-02-14 09:48:21 ----D---- C:\WINDOWS\system32\WCN
2016-02-14 09:48:21 ----D---- C:\WINDOWS\system32\MUI
2016-02-14 09:48:21 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-14 09:48:21 ----D---- C:\WINDOWS\system32\Dism
2016-02-14 09:48:18 ----D---- C:\WINDOWS\system32\wbem
2016-02-14 09:48:18 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-02-14 09:48:18 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2016-02-14 09:48:18 ----D---- C:\WINDOWS\system32\Com
2016-02-14 09:48:17 ----D---- C:\WINDOWS\Help
2016-02-14 09:48:17 ----D---- C:\WINDOWS\FileManager
2016-02-14 09:48:17 ----D---- C:\WINDOWS\apppatch
2016-02-14 09:32:02 ----D---- C:\WINDOWS\Logs
2016-02-14 09:29:13 ----D---- C:\WINDOWS\system32\wdi
2016-02-14 09:23:45 ----D---- C:\WINDOWS\system32\catroot2
2016-02-14 09:12:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-14 09:11:12 ----D---- C:\WINDOWS\AppReadiness
2016-02-14 09:08:58 ----D---- C:\WINDOWS\system32\restore
2016-02-14 09:06:02 ----HD---- C:\Program Files\WindowsApps
2016-02-14 09:04:27 ----HD---- C:\$Windows.~BT
2016-02-14 09:00:52 ----SHD---- C:\$Recycle.Bin
2016-02-14 08:59:06 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-14 04:30:13 ----D---- C:\WINDOWS\Registration
2016-02-14 04:29:49 ----D---- C:\WINDOWS\system32\LogFiles
2016-02-14 04:29:48 ----HD---- C:\WINDOWS\system32\GroupPolicyUsers
2016-02-14 04:27:10 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-02-14 04:26:49 ----RSD---- C:\WINDOWS\Media
2016-02-14 04:15:46 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-02-14 04:12:54 ----D---- C:\WINDOWS\SYSWOW64\SDA
2016-02-14 04:12:53 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-02-14 04:12:53 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-02-14 04:12:52 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-02-14 04:12:50 ----HD---- C:\WINDOWS\system32\WLANProfiles
2016-02-14 04:12:49 ----D---- C:\WINDOWS\system32\spool
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\sk-SK
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\NDF
2016-02-14 04:12:46 ----D---- C:\WINDOWS\system32\MRT
2016-02-14 04:12:45 ----D---- C:\WINDOWS\system32\IME
2016-02-14 04:12:45 ----D---- C:\WINDOWS\system32\en-US
2016-02-14 04:11:40 ----D---- C:\WINDOWS\Migration
2016-02-14 04:11:37 ----D---- C:\WINDOWS\DigitalLocker
2016-02-14 04:11:36 ----RD---- C:\WINDOWS\assembly
2016-02-14 04:11:35 ----SD---- C:\ProgramData\Microsoft
2016-02-14 04:11:35 ----D---- C:\ProgramData\PRICache
2016-02-14 04:11:32 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-02-14 04:11:25 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-14 04:11:24 ----D---- C:\Program Files\Common Files
2016-02-14 04:10:18 ----D---- C:\WINDOWS\system32\Recovery
2016-02-14 03:59:30 ----D---- C:\WINDOWS\twain_32
2016-02-14 03:59:30 ----D---- C:\WINDOWS\System
2016-02-14 03:57:50 ----D---- C:\WINDOWS\system32\catroot
2016-02-14 02:17:37 ----D---- C:\WINDOWS\AUInstallAgent
2016-02-14 00:33:54 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-13 22:17:22 ----D---- C:\Users\Kuchar\AppData\Roaming\TS3Client
2016-02-07 23:54:29 ----D---- C:\Users\Kuchar\AppData\Roaming\.minecraft
2016-02-06 06:55:35 ----D---- C:\ProgramData\Oracle
2016-01-23 22:04:19 ----D---- C:\ProgramData\McAfee
2016-01-23 22:04:19 ----D---- C:\Program Files (x86)\McAfee
2016-01-23 22:04:10 ----D---- C:\Program Files\Common Files\mcafee
2016-01-23 22:01:15 ----HD---- C:\WINDOWS\ELAMBKUP
2016-01-16 22:10:59 ----D---- C:\Program Files\Common Files\AV
2016-01-16 21:20:00 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-02-14 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-02-14 287016]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2012-12-01 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2016-01-23 38336]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-02-14 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-02-14 1065720]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-02-14 463744]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-02-14 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-02-14 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-02-14 165344]
R3 ACPIVPC;@oem17.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2012-12-01 33560]
R3 bcbtums;@oem32.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-11-21 81920]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-09-14 4083600]
R3 IntcDAud;@oem31.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 JMCR;JMCR; C:\WINDOWS\System32\drivers\jmcr.sys [2012-06-22 174176]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 NETwNe64;@netwew00.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2013-07-08 3344352]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-01-23 12379072]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-23 26560]
R3 nvvad_WaveExtensible;@oem9.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 usb3Hub;@oem15.inf,%usb3Hub.SVCDESC%;USB-IF USB 3.0 Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [2012-10-10 47072]
R3 vm332avs;@oem2.inf,%USBCamera.DeviceDesc2%;Lenovo Camera2; C:\WINDOWS\System32\Drivers\vm332avs.sys [2012-08-25 981112]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2014-11-21 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-11-21 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2016-02-14 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2016-02-14 1201664]
S3 btwampfl;@oem32.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys []
S3 btwaudio;@oem3.inf,%btaudio.SvcDesc%;Bluetooth Audio Device Service; C:\WINDOWS\system32\drivers\btwaudio.sys []
S3 btwavdt;@oem3.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\WINDOWS\System32\drivers\btwavdt.sys []
S3 btwl2cap;@oem6.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\WINDOWS\System32\drivers\btwrchid.sys []
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2016-02-14 167424]
S3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-14 237096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-07-18 627504]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-23 1163200]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-08-16 7168]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-23 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-23 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-01-23 1263040]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-07-18 149296]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-23 6308288]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]
S2 BcmBtRSupport;@oem32.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-07-18 272176]
S4 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-23 144200]
S4 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-23 144200]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]

-----------------EOF-----------------

Re: Kontrola logu, přehřívání pevného disku a využití na 100

Napsal: 14 úno 2016 19:02
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.