VIRY.CZ

Prosím o pomoc. zkolaboval mi ntb, po nové instalaci ntb pomalý (disk často na 100%).
Díky za pomoc.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří at 2016-02-15 11:20:53
Microsoft Windows 8
System drive C: has 314 GB (45%) free of 697 GB
Total RAM: 3986 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:21:03, on 15. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17568)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Common Files\Autodesk Shared\ISYS8\ISYSbridge.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connected Remote Service (HPConnectedRemote) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem23.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10581 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
atieclxx
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
ClassicStartMenu.exe -startup
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" -byrunkey
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\WINDOWS\System32\Taskmgr.exe" /3
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskhost.exe $(Arg0)
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2800 CREDAT:267521 /prefetch:2
"C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Program Files\AutoCAD 2010\acad.exe" "C:\Users\Jiří\Desktop\situace-chodník-var3-odsun prechodu.dwg"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
"C:\Program Files (x86)\Common Files\Autodesk Shared\ISYS8\ISYSbridge.exe" /Automation -Embedding
"C:\Program Files\Common Files\Autodesk Shared\WSCommCntr1.exe" /Automation -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-635232731-1543299879-1866813480-10017_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-635232731-1543299879-1866813480-10017 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 568 572 580 65536 576

"C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\29PINBAL\RSITx64.exe"
"C:\WINDOWS\system32\wermgr.exe" "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_HPConnectedRemot_81d6abc93b32538ab999d3d7a09fe4ab3223d591_cab_13f03f17"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12 809920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12 487360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12 687040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12 442816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12 809920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12 687040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-09-05 171040]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-09-05 399392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-09-05 441888]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-20 1664000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-25 2916152]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2015-11-12 161728]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-09-18 642216]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-19 371976]
"CLVirtualDrive"=C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2012-09-10 491632]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-07-13 93296]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2012-09-07 581024]
"HP CoolSense"=C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2012-09-14 1342008]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-09-05 441856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-02-15 11:20:53 ----D---- C:\Program Files\trend micro
2016-02-14 23:12:46 ----D---- C:\ProgramData\Package Cache
2016-02-14 22:40:01 ----D---- C:\ProgramData\FLEXnet
2016-02-14 22:35:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2016-02-14 22:32:52 ----D---- C:\Users\Jiří\AppData\Roaming\Autodesk
2016-02-14 22:32:52 ----D---- C:\ProgramData\Autodesk
2016-02-14 22:32:52 ----D---- C:\Program Files\Common Files\Autodesk Shared
2016-02-14 22:32:52 ----D---- C:\Program Files\AutoCAD 2010
2016-02-14 21:05:18 ----D---- C:\Users\Jiří\AppData\Roaming\Macromedia
2016-02-14 19:59:02 ----D---- C:\Program Files\Common Files\AV
2016-02-14 09:01:49 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-13 20:24:18 ----D---- C:\WINDOWS\system32\AutoUpdateLicense
2016-02-13 20:23:40 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\NotificationUI.exe
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\AutoUpdate.exe
2016-02-13 20:23:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-13 20:23:39 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-02-13 18:05:36 ----D---- C:\WINDOWS\Migration
2016-02-13 18:05:35 ----SD---- C:\WINDOWS\system32\CompatTel
2016-02-13 18:05:33 ----D---- C:\WINDOWS\system32\appraiser
2016-02-13 14:21:31 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-02-13 14:21:31 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-02-13 14:21:31 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-02-13 14:21:31 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-02-13 14:21:31 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-02-13 13:20:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-02-13 13:20:32 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-02-13 13:09:26 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2016-02-13 12:42:48 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-02-13 12:42:47 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-13 12:42:47 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-02-13 12:42:47 ----A---- C:\WINDOWS\explorer.exe
2016-02-13 12:42:43 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-02-13 12:42:41 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-02-13 12:42:41 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-02-13 12:42:40 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2016-02-13 12:42:40 ----A---- C:\WINDOWS\system32\vds.exe
2016-02-13 12:42:40 ----A---- C:\WINDOWS\system32\mscms.dll
2016-02-13 12:42:40 ----A---- C:\WINDOWS\system32\drivers\BthAvrcpTg.sys
2016-02-13 12:42:39 ----A---- C:\WINDOWS\system32\samlib.dll
2016-02-13 12:42:39 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2016-02-13 12:42:39 ----A---- C:\WINDOWS\system32\DeviceSetupManager.dll
2016-02-13 12:42:38 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2016-02-13 12:42:38 ----A---- C:\WINDOWS\system32\vdsutil.dll
2016-02-13 12:42:21 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-02-13 12:40:39 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-02-13 12:40:36 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2016-02-13 12:40:36 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2016-02-13 12:40:35 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2016-02-13 12:40:35 ----A---- C:\WINDOWS\system32\WSDApi.dll
2016-02-13 12:40:35 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2016-02-13 12:40:34 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2016-02-13 12:40:33 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-02-13 12:39:17 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2016-02-13 12:39:17 ----A---- C:\WINDOWS\system32\wusa.exe
2016-02-13 12:38:51 ----A---- C:\WINDOWS\system32\resutils.dll
2016-02-13 12:38:51 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-02-13 12:38:50 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-02-13 12:38:49 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-02-13 12:38:49 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2016-02-13 12:31:15 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-13 12:31:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-02-13 12:31:09 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-02-13 12:31:09 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-13 12:31:08 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-02-13 12:31:08 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-02-13 12:31:08 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2016-02-13 12:30:08 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-02-13 12:30:08 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\WinSCard.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\winmmbase.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\winmm.dll
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\drivers\HdAudio.sys
2016-02-13 12:30:06 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-02-13 12:30:05 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2016-02-13 12:30:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\Wwanadvui.dll
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\openfiles.exe
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-02-13 12:30:04 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2016-02-13 12:30:03 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2016-02-13 12:30:03 ----A---- C:\WINDOWS\SYSWOW64\openfiles.exe
2016-02-13 12:30:03 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2016-02-13 12:30:03 ----A---- C:\WINDOWS\system32\LocationApi.dll
2016-02-13 12:26:52 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-02-13 12:26:52 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2016-02-13 12:26:49 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-02-13 12:26:43 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-02-13 12:26:43 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2016-02-13 12:26:43 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-02-13 12:26:43 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-02-13 12:26:42 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-02-13 12:26:42 ----A---- C:\WINDOWS\system32\dwmapi.dll
2016-02-13 12:26:41 ----A---- C:\WINDOWS\system32\defragsvc.dll
2016-02-13 12:26:39 ----A---- C:\WINDOWS\SYSWOW64\KBDRUM.DLL
2016-02-13 12:26:39 ----A---- C:\WINDOWS\system32\KBDTAT.DLL
2016-02-13 12:26:39 ----A---- C:\WINDOWS\system32\KBDRUM.DLL
2016-02-13 12:26:39 ----A---- C:\WINDOWS\system32\Defrag.exe
2016-02-13 12:26:38 ----A---- C:\WINDOWS\SYSWOW64\KBDYAK.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\SYSWOW64\KBDTAT.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\SYSWOW64\KBDRU1.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\SYSWOW64\KBDRU.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\SYSWOW64\KBDBASH.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\system32\KBDYAK.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\system32\KBDRU1.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\system32\KBDRU.DLL
2016-02-13 12:26:38 ----A---- C:\WINDOWS\system32\KBDBASH.DLL
2016-02-13 12:24:12 ----A---- C:\WINDOWS\system32\hal.dll
2016-02-13 12:23:23 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-02-13 12:23:17 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2016-02-13 12:23:15 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2016-02-13 12:23:14 ----A---- C:\WINDOWS\system32\Windows.Storage.Compression.dll
2016-02-13 12:23:11 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2016-02-13 12:23:10 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-02-13 12:23:09 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2016-02-13 12:23:09 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2016-02-13 12:23:08 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2016-02-13 12:23:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Compression.dll
2016-02-13 12:23:06 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2016-02-13 12:23:05 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2016-02-13 12:23:04 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2016-02-13 12:23:04 ----A---- C:\WINDOWS\system32\input.dll
2016-02-13 12:23:04 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2016-02-13 12:23:03 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-02-13 12:23:02 ----A---- C:\WINDOWS\SYSWOW64\mswsock.dll
2016-02-13 12:22:58 ----A---- C:\WINDOWS\system32\microsoft-windows-pdc.dll
2016-02-13 12:22:57 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2016-02-13 12:22:57 ----A---- C:\WINDOWS\system32\mswsock.dll
2016-02-13 12:22:56 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2016-02-13 12:22:55 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2016-02-13 12:22:54 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-02-13 12:22:52 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-02-13 12:22:50 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2016-02-13 12:22:50 ----A---- C:\WINDOWS\system32\BdeUISrv.exe
2016-02-13 12:22:49 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2016-02-13 12:22:49 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2016-02-13 12:22:44 ----A---- C:\WINDOWS\SYSWOW64\kbdhebl3.dll
2016-02-13 12:22:44 ----A---- C:\WINDOWS\system32\kbdhebl3.dll
2016-02-13 12:21:47 ----A---- C:\WINDOWS\system32\dskquota.dll
2016-02-13 12:21:46 ----A---- C:\WINDOWS\SYSWOW64\dskquota.dll
2016-02-13 12:12:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-02-13 12:12:46 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2016-02-13 12:12:46 ----A---- C:\WINDOWS\system32\Robocopy.exe
2016-02-13 12:12:36 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-02-13 12:12:36 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-02-13 12:12:36 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-02-13 12:12:36 ----A---- C:\WINDOWS\system32\drivers\disk.sys
2016-02-13 12:12:35 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-02-13 12:12:35 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-02-13 12:12:35 ----A---- C:\WINDOWS\system32\icfupgd.dll
2016-02-13 12:12:35 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2016-02-13 12:10:55 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2016-02-13 12:10:55 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-02-13 12:10:54 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-02-13 12:10:54 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-02-13 12:10:53 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-02-13 12:10:53 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-02-13 12:10:53 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-02-13 12:10:53 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-02-13 12:10:52 ----A---- C:\WINDOWS\SYSWOW64\vds_ps.dll
2016-02-13 12:10:52 ----A---- C:\WINDOWS\system32\drivers\BthhfHid.sys
2016-02-13 12:10:52 ----A---- C:\WINDOWS\system32\drivers\BtaMPM.sys
2016-02-13 12:10:32 ----A---- C:\WINDOWS\system32\srvsvc.dll
2016-02-13 12:10:32 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-02-13 12:10:32 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-02-13 12:10:31 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-02-13 12:10:30 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-02-13 12:10:26 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2016-02-13 12:10:26 ----A---- C:\WINDOWS\system32\sscore.dll
2016-02-13 12:09:56 ----A---- C:\WINDOWS\SYSWOW64\shdocvw.dll
2016-02-13 12:09:56 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-02-13 12:09:56 ----A---- C:\WINDOWS\system32\shdocvw.dll
2016-02-13 12:09:56 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-02-13 12:09:42 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-02-13 12:09:42 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-02-13 12:09:41 ----A---- C:\WINDOWS\system32\consent.exe
2016-02-13 12:09:18 ----A---- C:\WINDOWS\SYSWOW64\wvc.dll
2016-02-13 12:09:18 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2016-02-13 12:09:18 ----A---- C:\WINDOWS\system32\wvc.dll
2016-02-13 12:09:18 ----A---- C:\WINDOWS\system32\wdc.dll
2016-02-13 12:04:12 ----A---- C:\WINDOWS\SYSWOW64\KBDKURD.DLL
2016-02-13 12:04:12 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2016-02-13 12:04:12 ----A---- C:\WINDOWS\system32\KBDKURD.DLL
2016-02-13 12:04:12 ----A---- C:\WINDOWS\system32\Display.dll
2016-02-13 12:03:36 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-02-13 12:03:26 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-02-13 12:03:20 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-02-13 12:03:15 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-02-13 12:03:12 ----A---- C:\WINDOWS\HelpPane.exe
2016-02-13 12:03:11 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-02-13 12:03:11 ----A---- C:\WINDOWS\system32\dafWCN.dll
2016-02-13 12:03:10 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2016-02-13 12:03:10 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-02-13 12:03:10 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-02-13 12:03:10 ----A---- C:\WINDOWS\system32\rdpclip.exe
2016-02-13 12:03:10 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2016-02-13 12:03:09 ----A---- C:\WINDOWS\system32\WcnApi.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\system32\WcnEapPeerProxy.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\system32\WcnEapAuthProxy.dll
2016-02-13 12:03:08 ----A---- C:\WINDOWS\system32\fdWCN.dll
2016-02-13 12:03:07 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\drivers\fxppm.sys
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\drivers\amdppm.sys
2016-02-13 12:03:07 ----A---- C:\WINDOWS\system32\drivers\amdk8.sys
2016-02-13 12:03:06 ----A---- C:\WINDOWS\system32\iscsilog.dll
2016-02-13 12:01:15 ----A---- C:\WINDOWS\system32\kernel32.dll
2016-02-13 12:01:14 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2016-02-13 12:01:14 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2016-02-13 12:01:14 ----A---- C:\WINDOWS\system32\gpedit.dll
2016-02-13 12:01:14 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-02-13 12:01:13 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2016-02-13 12:01:13 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2016-02-13 10:30:03 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-02-13 04:57:47 ----D---- C:\WINDOWS\system32\MRT
2016-02-13 04:57:35 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-13 04:41:55 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-02-13 04:41:55 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-02-13 03:28:03 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2016-02-13 03:27:49 ----A---- C:\WINDOWS\SYSWOW64\aspnet_counters.dll
2016-02-13 03:14:58 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-13 03:14:58 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-13 03:07:28 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2016-02-13 03:07:28 ----A---- C:\WINDOWS\system32\WebClnt.dll
2016-02-13 03:07:28 ----A---- C:\WINDOWS\system32\davclnt.dll
2016-02-13 03:07:27 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2016-02-13 03:07:06 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-13 03:07:03 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-02-13 03:07:00 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-13 03:06:50 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-02-13 03:06:49 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2016-02-13 03:06:49 ----A---- C:\WINDOWS\system32\catsrvut.dll
2016-02-13 03:02:06 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-02-13 03:00:54 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-02-13 03:00:48 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-02-13 03:00:22 ----A---- C:\WINDOWS\SYSWOW64\synceng.dll
2016-02-13 03:00:22 ----A---- C:\WINDOWS\system32\synceng.dll
2016-02-13 02:56:55 ----A---- C:\WINDOWS\system32\mmc.exe
2016-02-13 02:56:54 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-02-13 02:56:53 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2016-02-13 02:56:45 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-02-13 02:56:42 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2016-02-13 02:56:42 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2016-02-13 02:56:41 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2016-02-13 02:56:41 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-02-13 02:56:40 ----A---- C:\WINDOWS\system32\WSDMon.dll
2016-02-13 02:56:38 ----A---- C:\WINDOWS\system32\inetpp.dll
2016-02-13 02:56:37 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2016-02-13 02:56:36 ----A---- C:\WINDOWS\SYSWOW64\wiaacmgr.exe
2016-02-13 02:56:35 ----A---- C:\WINDOWS\system32\ncbservice.dll
2016-02-13 02:56:34 ----A---- C:\WINDOWS\system32\httpprxm.dll
2016-02-13 02:56:34 ----A---- C:\WINDOWS\system32\adhsvc.dll
2016-02-13 02:56:33 ----A---- C:\WINDOWS\system32\keepaliveprovider.dll
2016-02-13 02:56:33 ----A---- C:\WINDOWS\system32\adhapi.dll
2016-02-13 02:56:32 ----A---- C:\WINDOWS\system32\httpprxp.dll
2016-02-13 02:53:11 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-02-13 02:53:10 ----A---- C:\WINDOWS\system32\cdd.dll
2016-02-13 02:52:22 ----A---- C:\WINDOWS\system32\rastls.dll
2016-02-13 02:52:21 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2016-02-13 02:51:48 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2016-02-13 02:51:48 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-02-13 02:51:47 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2016-02-13 02:51:46 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2016-02-13 02:51:45 ----A---- C:\WINDOWS\system32\sdbinst.exe
2016-02-13 02:51:33 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2016-02-13 02:51:32 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2016-02-13 02:50:13 ----A---- C:\WINDOWS\SYSWOW64\ubpm.dll
2016-02-13 02:50:13 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-02-13 02:49:49 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-02-13 02:49:46 ----A---- C:\WINDOWS\system32\WSService.dll
2016-02-13 02:49:43 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2016-02-13 02:49:43 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-02-13 02:49:43 ----A---- C:\WINDOWS\system32\sppc.dll
2016-02-13 02:49:41 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-02-13 02:49:41 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-02-13 02:49:41 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2016-02-13 02:49:40 ----A---- C:\WINDOWS\system32\WSClient.dll
2016-02-13 02:49:38 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2016-02-13 02:49:36 ----A---- C:\WINDOWS\system32\setupcln.dll
2016-02-13 02:49:33 ----A---- C:\WINDOWS\SYSWOW64\setupcln.dll
2016-02-13 02:49:33 ----A---- C:\WINDOWS\SYSWOW64\OEMLicense.dll
2016-02-13 02:46:07 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-02-13 02:46:06 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-02-13 02:45:25 ----A---- C:\WINDOWS\system32\localspl.dll
2016-02-13 02:45:24 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-02-13 02:45:23 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-02-13 02:45:21 ----A---- C:\WINDOWS\system32\wuaext.dll
2016-02-13 02:44:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-13 02:44:48 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-02-13 02:44:48 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-02-13 02:44:47 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2016-02-13 02:44:47 ----A---- C:\WINDOWS\system32\wucltux.dll
2016-02-13 02:44:47 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-02-13 02:44:46 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2016-02-13 02:44:46 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2016-02-13 02:44:46 ----A---- C:\WINDOWS\system32\wuwebv.dll
2016-02-13 02:44:46 ----A---- C:\WINDOWS\system32\wudriver.dll
2016-02-13 02:44:46 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-02-13 02:44:45 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2016-02-13 02:44:45 ----A---- C:\WINDOWS\system32\wuapp.exe
2016-02-13 02:42:32 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2016-02-13 02:42:32 ----A---- C:\WINDOWS\system32\imagehlp.dll
2016-02-13 02:39:23 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2016-02-13 02:39:23 ----A---- C:\WINDOWS\system32\osk.exe
2016-02-13 02:39:18 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2016-02-13 02:39:18 ----A---- C:\WINDOWS\system32\appidsvc.dll
2016-02-13 02:39:18 ----A---- C:\WINDOWS\system32\appidpolicyconverter.exe
2016-02-13 02:39:18 ----A---- C:\WINDOWS\system32\appidcertstorecheck.exe
2016-02-13 02:39:18 ----A---- C:\WINDOWS\system32\appidapi.dll
2016-02-13 02:39:11 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-02-13 02:39:11 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-02-13 02:38:24 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-13 02:38:24 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\invagent.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\devinv.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\aepic.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-02-13 02:35:04 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2016-02-13 02:33:57 ----A---- C:\WINDOWS\system32\services.exe
2016-02-13 02:31:08 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-02-13 02:31:07 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-02-13 02:31:06 ----A---- C:\WINDOWS\system32\aaclient.dll
2016-02-13 02:31:05 ----A---- C:\WINDOWS\SYSWOW64\aaclient.dll
2016-02-13 02:31:05 ----A---- C:\WINDOWS\system32\ole32.dll
2016-02-13 02:31:04 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-02-13 02:30:11 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-02-13 02:30:11 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-02-13 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-02-13 02:30:10 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-02-13 02:26:46 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-02-13 02:26:22 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-02-13 02:26:17 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-02-13 02:26:17 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-02-13 02:26:17 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2016-02-13 02:26:15 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-02-13 02:26:11 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2016-02-13 02:26:11 ----A---- C:\WINDOWS\system32\rpchttp.dll
2016-02-13 02:26:08 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-02-13 02:26:06 ----A---- C:\WINDOWS\SYSWOW64\FXSCOMEX.dll
2016-02-13 02:26:06 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2016-02-13 02:26:06 ----A---- C:\WINDOWS\system32\FXST30.dll
2016-02-13 02:26:06 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2016-02-13 02:26:06 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2016-02-13 02:26:04 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2016-02-13 02:25:35 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2016-02-13 02:24:05 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-02-13 02:21:34 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-02-13 02:21:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-02-13 02:21:33 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-02-13 02:21:32 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-02-13 02:21:32 ----A---- C:\WINDOWS\system32\SettingSyncInfo.dll
2016-02-13 02:21:31 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncInfo.dll
2016-02-13 02:17:20 ----A---- C:\WINDOWS\system32\drivers\WdfLdr.sys
2016-02-13 02:17:20 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2016-02-13 02:17:19 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-02-13 02:17:19 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-02-13 02:17:14 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2016-02-13 02:16:45 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2016-02-13 02:16:44 ----A---- C:\WINDOWS\system32\drivers\usbcir.sys
2016-02-13 02:15:20 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-02-13 02:15:19 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-02-13 02:15:19 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-02-13 02:15:19 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-02-13 02:15:18 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2016-02-13 02:13:05 ----A---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2016-02-13 02:11:44 ----A---- C:\WINDOWS\SYSWOW64\msvcr100_clr0400.dll
2016-02-13 01:58:23 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-02-13 01:58:23 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-02-13 01:58:22 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-02-13 01:58:22 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-02-13 01:58:21 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-02-13 01:58:17 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2016-02-13 01:58:11 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-02-13 01:58:11 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-02-13 01:58:09 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-02-13 01:58:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-02-13 01:58:08 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2016-02-13 01:58:00 ----A---- C:\WINDOWS\system32\discan.dll
2016-02-13 01:57:59 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2016-02-13 01:57:57 ----A---- C:\WINDOWS\system32\NdisImPlatform.dll
2016-02-13 01:57:52 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2016-02-13 01:57:49 ----A---- C:\WINDOWS\system32\DevDispItemProvider.dll
2016-02-13 01:57:44 ----A---- C:\WINDOWS\system32\fsquirt.exe
2016-02-13 01:57:39 ----A---- C:\WINDOWS\system32\WSDPrintProxy.DLL
2016-02-13 01:57:35 ----A---- C:\WINDOWS\SYSWOW64\DevDispItemProvider.dll
2016-02-13 01:57:33 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2016-02-13 01:57:32 ----A---- C:\WINDOWS\system32\drivers\monitor.sys
2016-02-13 01:57:29 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-02-13 01:57:29 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2016-02-13 01:44:10 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-02-13 01:37:38 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-02-13 01:37:37 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-02-13 01:36:20 ----A---- C:\WINDOWS\system32\termsrv.dll
2016-02-13 01:36:20 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-02-13 01:36:19 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-02-13 01:36:19 ----A---- C:\WINDOWS\system32\winsta.dll
2016-02-13 01:36:18 ----A---- C:\WINDOWS\SYSWOW64\winsta.dll
2016-02-13 01:30:17 ----A---- C:\WINDOWS\SYSWOW64\msxml6r.dll
2016-02-13 01:30:17 ----A---- C:\WINDOWS\SYSWOW64\msxml3r.dll
2016-02-13 01:30:17 ----A---- C:\WINDOWS\system32\msxml6r.dll
2016-02-13 01:30:17 ----A---- C:\WINDOWS\system32\msxml3r.dll
2016-02-13 01:29:33 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-13 01:29:10 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-13 01:28:52 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-13 01:28:48 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-13 01:28:44 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-13 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-13 01:28:40 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-13 01:28:40 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-02-13 01:28:39 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-13 01:28:39 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-13 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-13 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-02-13 01:28:37 ----A---- C:\WINDOWS\system32\uxtheme.dll
2016-02-13 01:28:37 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-13 01:28:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-02-13 01:28:36 ----A---- C:\WINDOWS\system32\jscript.dll
2016-02-13 01:28:35 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-02-13 01:28:35 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-02-13 01:28:33 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-02-13 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2016-02-13 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2016-02-13 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2016-02-13 01:28:32 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-02-13 01:28:32 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-02-13 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-02-13 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-02-13 01:28:31 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-02-13 01:28:30 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\system32\UXInit.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\system32\msrating.dll
2016-02-13 01:28:29 ----A---- C:\WINDOWS\system32\iesysprep.dll
2016-02-13 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2016-02-13 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-02-13 01:28:28 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-02-13 01:28:28 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-02-13 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\INETRES.dll
2016-02-13 01:28:26 ----A---- C:\WINDOWS\system32\INETRES.dll
2016-02-13 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\cryptnet.dll
2016-02-13 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\certutil.exe
2016-02-13 01:27:46 ----A---- C:\WINDOWS\system32\cryptnet.dll
2016-02-13 01:27:46 ----A---- C:\WINDOWS\system32\certutil.exe
2016-02-13 01:27:38 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-02-13 01:27:37 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-02-13 01:23:38 ----A---- C:\WINDOWS\system32\twinui.dll
2016-02-13 01:23:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-02-13 01:23:32 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-02-13 01:23:32 ----A---- C:\WINDOWS\system32\authui.dll
2016-02-13 01:23:08 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2016-02-13 01:23:08 ----A---- C:\WINDOWS\system32\scesrv.dll
2016-02-13 01:19:32 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-13 01:19:32 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-13 01:19:29 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-02-13 01:19:29 ----A---- C:\WINDOWS\system32\clfsw32.dll
2016-02-13 01:19:28 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2016-02-13 01:18:28 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-13 01:18:27 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-13 01:17:58 ----A---- C:\WINDOWS\system32\msi.dll
2016-02-13 01:17:57 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-02-13 01:17:54 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2016-02-13 01:17:54 ----A---- C:\WINDOWS\system32\msihnd.dll
2016-02-13 01:17:53 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2016-02-13 01:17:53 ----A---- C:\WINDOWS\system32\msiexec.exe
2016-02-13 01:17:41 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-02-13 01:17:40 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2016-02-13 01:17:40 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-02-13 01:17:40 ----A---- C:\WINDOWS\system32\nlaapi.dll
2016-02-13 01:14:18 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-02-13 01:14:17 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-02-13 01:14:17 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-02-13 01:14:17 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-02-13 01:10:33 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2016-02-13 01:10:33 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-02-13 01:10:33 ----A---- C:\WINDOWS\system32\sysreset.exe
2016-02-13 01:10:33 ----A---- C:\WINDOWS\system32\resetengmig.dll
2016-02-13 01:10:33 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-02-13 01:10:33 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2016-02-13 01:10:33 ----A---- C:\WINDOWS\system32\ReAgent.dll
2016-02-13 01:08:15 ----A---- C:\WINDOWS\system32\schannel.dll
2016-02-13 01:08:14 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-02-13 01:08:10 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-02-13 01:08:08 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-02-13 01:08:07 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-02-13 01:08:06 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-02-13 01:02:15 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-02-13 01:02:15 ----A---- C:\WINDOWS\system32\wlroamextension.dll
2016-02-13 01:02:15 ----A---- C:\WINDOWS\system32\duser.dll
2016-02-13 01:02:13 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-02-13 01:02:13 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-02-13 01:02:08 ----A---- C:\WINDOWS\system32\hotspotauth.dll
2016-02-13 01:02:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2016-02-13 01:02:07 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2016-02-13 01:02:06 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-02-13 01:02:06 ----A---- C:\WINDOWS\system32\taskkill.exe
2016-02-13 01:02:04 ----A---- C:\WINDOWS\SYSWOW64\wlroamextension.dll
2016-02-13 01:02:04 ----A---- C:\WINDOWS\system32\tasklist.exe
2016-02-13 01:02:03 ----A---- C:\WINDOWS\SYSWOW64\taskkill.exe
2016-02-13 01:02:02 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2016-02-13 01:02:02 ----A---- C:\WINDOWS\system32\wersvc.dll
2016-02-13 01:02:01 ----A---- C:\WINDOWS\SYSWOW64\tasklist.exe
2016-02-13 01:00:48 ----A---- C:\WINDOWS\system32\wer.dll
2016-02-13 01:00:44 ----A---- C:\WINDOWS\system32\WerFault.exe
2016-02-13 01:00:43 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2016-02-13 01:00:42 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-02-13 01:00:41 ----A---- C:\WINDOWS\system32\Faultrep.dll
2016-02-13 01:00:40 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2016-02-13 01:00:40 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2016-02-13 01:00:39 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2016-02-13 00:57:43 ----A---- C:\WINDOWS\system32\objsel.dll
2016-02-13 00:57:42 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-02-13 00:57:41 ----A---- C:\WINDOWS\SYSWOW64\objsel.dll
2016-02-13 00:57:38 ----A---- C:\WINDOWS\system32\dimsroam.dll
2016-02-13 00:57:37 ----A---- C:\WINDOWS\SYSWOW64\dimsroam.dll
2016-02-13 00:56:31 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-02-13 00:56:30 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-02-13 00:54:33 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2016-02-13 00:54:33 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2016-02-13 00:54:32 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2016-02-13 00:54:32 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2016-02-13 00:54:32 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2016-02-13 00:54:32 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2016-02-13 00:54:31 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2016-02-13 00:53:43 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-02-13 00:53:43 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-02-13 00:53:43 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-02-13 00:53:42 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-02-13 00:53:42 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2016-02-13 00:53:41 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-02-13 00:53:41 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-02-13 00:52:34 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2016-02-13 00:52:32 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2016-02-13 00:50:03 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-02-13 00:48:23 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2016-02-13 00:43:53 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-02-13 00:43:46 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-02-13 00:43:45 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2016-02-13 00:43:43 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2016-02-13 00:43:42 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2016-02-13 00:43:42 ----A---- C:\WINDOWS\system32\netprofm.dll
2016-02-13 00:43:39 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-13 00:43:38 ----A---- C:\WINDOWS\system32\stobject.dll
2016-02-13 00:43:37 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-02-13 00:43:36 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-02-13 00:43:36 ----A---- C:\WINDOWS\system32\Magnify.exe
2016-02-13 00:43:35 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-02-13 00:43:35 ----A---- C:\WINDOWS\system32\taskhost.exe
2016-02-13 00:43:35 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-02-13 00:43:34 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2016-02-13 00:43:33 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-02-13 00:43:33 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-02-13 00:43:32 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2016-02-13 00:43:32 ----A---- C:\WINDOWS\system32\taskhostex.exe
2016-02-13 00:43:32 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-02-13 00:43:31 ----A---- C:\WINDOWS\SYSWOW64\netprofm.dll
2016-02-13 00:43:31 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-02-13 00:43:31 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2016-02-13 00:43:31 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2016-02-13 00:43:31 ----A---- C:\WINDOWS\system32\biwinrt.dll
2016-02-13 00:43:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-02-13 00:43:27 ----A---- C:\WINDOWS\SYSWOW64\npmproxy.dll
2016-02-13 00:43:27 ----A---- C:\WINDOWS\SYSWOW64\muifontsetup.dll
2016-02-13 00:43:27 ----A---- C:\WINDOWS\system32\muifontsetup.dll
2016-02-13 00:43:25 ----A---- C:\WINDOWS\SYSWOW64\nlmsprep.dll
2016-02-13 00:43:25 ----A---- C:\WINDOWS\SYSWOW64\nlmproxy.dll
2016-02-13 00:41:12 ----A---- C:\WINDOWS\system32\autochk.exe
2016-02-13 00:41:11 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2016-02-13 00:41:11 ----A---- C:\WINDOWS\system32\untfs.dll
2016-02-13 00:41:10 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2016-02-13 00:40:55 ----A---- C:\WINDOWS\SYSWOW64\msdrm.dll
2016-02-13 00:40:55 ----A---- C:\WINDOWS\system32\msdrm.dll
2016-02-13 00:33:25 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2016-02-13 00:32:27 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2016-02-13 00:32:27 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2016-02-13 00:32:27 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2016-02-13 00:32:27 ----A---- C:\WINDOWS\system32\scrrun.dll
2016-02-13 00:32:27 ----A---- C:\WINDOWS\system32\scrobj.dll
2016-02-13 00:32:27 ----A---- C:\WINDOWS\system32\cscript.exe
2016-02-13 00:31:30 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2016-02-13 00:31:30 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-02-13 00:31:30 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2016-02-13 00:31:30 ----A---- C:\WINDOWS\system32\lpk.dll
2016-02-13 00:31:30 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-02-13 00:31:30 ----A---- C:\WINDOWS\system32\dciman32.dll
2016-02-13 00:31:14 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-02-13 00:31:14 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-02-13 00:30:24 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-02-13 00:30:23 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-02-13 00:30:23 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-02-13 00:30:22 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-02-13 00:30:22 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-02-13 00:30:22 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-02-13 00:30:21 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-02-13 00:30:21 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-02-13 00:30:20 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-02-13 00:30:20 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-02-13 00:30:20 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-13 00:30:20 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-02-13 00:30:20 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-02-13 00:30:19 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-02-13 00:30:19 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-02-13 00:30:19 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-02-13 00:30:19 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-02-13 00:30:19 ----A---- C:\WINDOWS\system32\mf.dll
2016-02-13 00:30:19 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-02-13 00:30:19 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-13 00:30:18 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-02-13 00:30:18 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-02-13 00:30:18 ----A---- C:\WINDOWS\system32\evr.dll
2016-02-13 00:30:17 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2016-02-13 00:30:17 ----A---- C:\WINDOWS\system32\winmde.dll
2016-02-13 00:30:16 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-02-13 00:30:16 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-02-13 00:30:16 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-02-13 00:30:16 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2016-02-13 00:30:16 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-02-13 00:30:16 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-02-13 00:30:15 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-13 00:30:15 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-02-13 00:30:14 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-02-13 00:30:14 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-02-13 00:30:14 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-02-13 00:30:14 ----A---- C:\WINDOWS\system32\quartz.dll
2016-02-13 00:30:14 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2016-02-13 00:30:14 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-02-13 00:30:13 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-02-13 00:30:13 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-02-13 00:30:13 ----A---- C:\WINDOWS\system32\mfps.dll
2016-02-13 00:30:12 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-02-13 00:30:11 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-02-13 00:30:11 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-02-13 00:30:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-02-13 00:30:05 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-13 00:30:04 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-02-13 00:30:04 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-02-13 00:30:04 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-02-13 00:30:04 ----A---- C:\WINDOWS\system32\EncDump.dll
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\qasf.dll
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-13 00:30:03 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-02-13 00:30:02 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-02-13 00:30:02 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-02-13 00:30:02 ----A---- C:\WINDOWS\system32\devenum.dll
2016-02-13 00:30:01 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-02-13 00:30:01 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-02-13 00:30:01 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-02-13 00:30:01 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-02-13 00:30:00 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-02-13 00:30:00 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-02-13 00:30:00 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-02-13 00:30:00 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2016-02-13 00:30:00 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2016-02-13 00:30:00 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2016-02-13 00:27:21 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-02-13 00:27:21 ----A---- C:\WINDOWS\system32\pcalua.exe
2016-02-13 00:27:21 ----A---- C:\WINDOWS\system32\pcaevts.dll
2016-02-13 00:27:21 ----A---- C:\WINDOWS\system32\pcadm.dll
2016-02-13 00:27:18 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-02-13 00:27:18 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-02-13 00:26:03 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2016-02-13 00:26:03 ----A---- C:\WINDOWS\system32\wintrust.dll
2016-02-13 00:26:02 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-02-13 00:26:02 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-02-13 00:26:02 ----A---- C:\WINDOWS\system32\cryptsvc.dll
2016-02-13 00:26:02 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-02-13 00:26:02 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-02-13 00:25:46 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2016-02-13 00:25:46 ----A---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnet.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2016-02-13 00:25:44 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2016-02-13 00:24:21 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-02-13 00:24:21 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2016-02-13 00:24:21 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-02-13 00:24:20 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-02-13 00:24:20 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-02-13 00:23:26 ----A---- C:\WINDOWS\system32\win32k.sys
2016-02-13 00:23:25 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-02-13 00:23:25 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-02-13 00:23:25 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-02-13 00:23:24 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-02-13 00:23:24 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-02-13 00:23:24 ----A---- C:\WINDOWS\system32\user32.dll
2016-02-13 00:23:24 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-02-13 00:23:12 ----A---- C:\WINDOWS\system32\sysmain.dll
2016-02-13 00:23:11 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2016-02-13 00:22:48 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2016-02-13 00:22:48 ----A---- C:\WINDOWS\system32\esent.dll
2016-02-13 00:18:43 ----A---- C:\WINDOWS\system32\wmp.dll
2016-02-13 00:18:43 ----A---- C:\WINDOWS\system32\tquery.dll
2016-02-13 00:18:41 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-02-13 00:18:40 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-02-13 00:18:39 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-02-13 00:18:37 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-02-13 00:18:32 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2016-02-13 00:18:32 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-02-13 00:18:31 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2016-02-13 00:18:31 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-02-13 00:18:31 ----A---- C:\WINDOWS\system32\rsaenh.dll
2016-02-13 00:18:31 ----A---- C:\WINDOWS\system32\kd_02_10ec.dll
2016-02-13 00:18:31 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2016-02-13 00:18:30 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-02-13 00:18:30 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2016-02-13 00:18:30 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\mssph.dll
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\dwmredir.dll
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\conhost.exe
2016-02-13 00:18:30 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-02-13 00:18:29 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-13 00:18:28 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-02-13 00:18:28 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-02-13 00:18:28 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\system32\XpsRasterService.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\system32\fhengine.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2016-02-13 00:18:27 ----A---- C:\WINDOWS\system32\ci.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\SYSWOW64\XpsRasterService.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2016-02-13 00:18:26 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\mssvp.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\kdvm.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\kdnet.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\iuilp.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\GenuineCenter.dll
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\hidi2c.sys
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2016-02-13 00:18:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\SYSWOW64\fmifs.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\mssphtb.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\mssitlb.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\msshooks.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\msscntrs.dll
2016-02-13 00:18:25 ----A---- C:\WINDOWS\system32\fmifs.dll
2016-02-13 00:18:24 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2016-02-13 00:18:24 ----A---- C:\WINDOWS\system32\tzres.dll
2016-02-13 00:18:19 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2016-02-13 00:18:19 ----A---- C:\WINDOWS\system32\packager.dll
2016-02-13 00:18:09 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2016-02-13 00:18:09 ----A---- C:\WINDOWS\system32\pku2u.dll
2016-02-13 00:18:04 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-02-13 00:18:04 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-13 00:18:00 ----A---- C:\WINDOWS\system32\InkEd.dll
2016-02-13 00:17:59 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-02-13 00:17:59 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-02-13 00:17:55 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-02-13 00:17:55 ----A---- C:\WINDOWS\system32\comctl32.dll
2016-02-13 00:17:41 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-13 00:17:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-13 00:17:28 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-02-13 00:17:28 ----A---- C:\WINDOWS\system32\qedit.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-13 00:17:25 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-02-13 00:17:24 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2016-02-13 00:17:24 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2016-02-13 00:17:07 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-02-13 00:17:07 ----A---- C:\WINDOWS\system32\notepad.exe
2016-02-13 00:17:07 ----A---- C:\WINDOWS\notepad.exe
2016-02-13 00:17:06 ----A---- C:\WINDOWS\SYSWOW64\cryptdlg.dll
2016-02-13 00:17:06 ----A---- C:\WINDOWS\system32\cryptdlg.dll
2016-02-13 00:16:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-13 00:16:04 ----A---- C:\WINDOWS\system32\winload.exe
2016-02-13 00:16:04 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-13 00:16:03 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-13 00:16:03 ----A---- C:\WINDOWS\system32\winresume.exe
2016-02-13 00:16:03 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-13 00:16:03 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-02-13 00:16:03 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-02-13 00:16:02 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\wdigest.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\lsm.dll
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-13 00:16:02 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\SYSWOW64\wdigest.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\workerdd.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\TSpkg.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\sspisrv.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\msaudite.dll
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\lsass.exe
2016-02-13 00:16:01 ----A---- C:\WINDOWS\system32\credssp.dll
2016-02-13 00:15:26 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-13 00:15:09 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-02-13 00:14:40 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2016-02-13 00:14:40 ----A---- C:\WINDOWS\system32\msieftp.dll
2016-02-13 00:14:32 ----A---- C:\WINDOWS\system32\tssdisai.dll
2016-02-13 00:14:31 ----A---- C:\WINDOWS\system32\RDWebAI.dll
2016-02-13 00:14:31 ----A---- C:\WINDOWS\system32\poqexec.exe
2016-02-13 00:14:30 ----A---- C:\WINDOWS\system32\VmHostAI.dll
2016-02-13 00:14:30 ----A---- C:\WINDOWS\system32\appserverai.dll
2016-02-13 00:14:29 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2016-02-13 00:14:04 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-02-13 00:14:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-02-12 23:10:04 ----D---- C:\Users\Jiří\AppData\Roaming\TeamViewer
2016-02-12 23:09:50 ----D---- C:\Program Files (x86)\TeamViewer
2016-02-12 22:57:41 ----D---- C:\Users\Jiří\AppData\Roaming\hpqlog
2016-02-12 22:56:45 ----D---- C:\Users\Jiří\AppData\Roaming\Hewlett-Packard
2016-02-12 22:46:42 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2016-02-12 22:46:39 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2016-02-12 22:46:39 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2016-02-12 22:44:22 ----D---- C:\direct
2016-02-12 22:37:46 ----D---- C:\Program Files (x86)\Microsoft Works
2016-02-12 22:36:38 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2016-02-12 22:33:18 ----D---- C:\Program Files\Microsoft Office
2016-02-12 22:33:14 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2016-02-12 22:32:13 ----D---- C:\ProgramData\Microsoft Help
2016-02-12 22:14:18 ----D---- C:\ProgramData\ClassicShell
2016-02-12 22:13:53 ----D---- C:\Users\Jiří\AppData\Roaming\ClassicShell
2016-02-12 22:13:03 ----D---- C:\Program Files\Classic Shell
2016-02-12 22:06:44 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2016-02-12 22:06:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2016-02-12 22:06:38 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2016-02-12 22:06:36 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2016-02-12 22:06:36 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2016-02-12 22:06:26 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2016-02-12 22:06:26 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2016-02-12 22:06:23 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2016-02-12 22:06:23 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2016-02-12 22:06:20 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2016-02-12 22:06:20 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2016-02-12 22:06:19 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2016-02-12 22:06:19 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2016-02-12 22:06:18 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2016-02-12 22:06:18 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2016-02-12 22:06:17 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2016-02-12 22:06:17 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2016-02-12 22:06:16 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2016-02-12 22:06:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2016-02-12 22:06:14 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2016-02-12 22:06:14 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_34.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\d3dx10.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2016-02-12 22:06:05 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2016-02-12 22:06:05 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2016-02-12 22:06:04 ----A---- C:\WINDOWS\SYSWOW64\xinput1_1.dll
2016-02-12 22:06:04 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2016-02-12 22:06:03 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_1.dll
2016-02-12 22:06:03 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_26.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_25.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2016-02-12 22:05:55 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_24.dll
2016-02-12 22:05:55 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2016-02-12 21:57:32 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-02-12 21:57:29 ----A---- C:\WINDOWS\system32\wushareduxresources.dll
2016-02-12 21:57:29 ----A---- C:\WINDOWS\system32\wups2.dll
2016-02-12 21:57:29 ----A---- C:\WINDOWS\system32\wups.dll
2016-02-12 21:45:14 ----D---- C:\Program Files (x86)\Microsoft
2016-02-12 21:37:49 ----D---- C:\Program Files (x86)\Google
2016-02-12 21:35:51 ----HD---- C:\WINDOWS\msdownld.tmp
2016-02-12 21:35:44 ----D---- C:\WINDOWS\SYSWOW64\directx
2016-02-12 21:15:39 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2016-02-12 21:15:39 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2016-02-12 21:15:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_30.dll
2016-02-12 21:15:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2016-02-12 21:00:50 ----D---- C:\Users\Jiří\AppData\Roaming\ATI
2016-02-12 20:58:47 ----D---- C:\Users\Jiří\AppData\Roaming\Adobe
2016-02-12 20:56:24 ----D---- C:\Users\Jiří\AppData\Roaming\Synaptics
2016-02-12 20:55:23 ----HD---- C:\Program Files (x86)\Uninstall Information
2016-02-12 20:52:11 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Šablony
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Plocha
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Nabídka Start
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Dokumenty
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Data aplikací
2016-02-12 20:39:53 ----SD---- C:\Users\Jiří\AppData\Roaming\Microsoft
2016-02-12 20:27:22 ----D---- C:\Windows.old
2016-02-12 19:58:31 ----HD---- C:\$SysReset

======List of files/folders modified in the last 1 month======

2016-02-15 11:20:59 ----D---- C:\WINDOWS\Temp
2016-02-15 11:20:53 ----RD---- C:\Program Files
2016-02-15 11:02:03 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-02-15 11:00:57 ----A---- C:\WINDOWS\SYSWOW64\bscs.ini
2016-02-15 11:00:06 ----D---- C:\WINDOWS\system32\sru
2016-02-15 10:57:39 ----A---- C:\WINDOWS\SYSWOW64\LOCALSERVICE.INI
2016-02-15 10:57:35 ----A---- C:\WINDOWS\SYSWOW64\LOCALDEVICE.INI
2016-02-15 10:54:08 ----D---- C:\WINDOWS\Inf
2016-02-15 10:48:37 ----SHD---- C:\WINDOWS\Installer
2016-02-15 10:42:31 ----D---- C:\WINDOWS\Prefetch
2016-02-15 10:42:20 ----D---- C:\WINDOWS\SysWOW64
2016-02-15 10:36:36 ----D---- C:\Program Files (x86)\Microsoft Office
2016-02-15 10:35:41 ----D---- C:\Program Files (x86)\Common Files
2016-02-15 10:32:34 ----DC---- C:\WINDOWS\Panther
2016-02-15 10:29:09 ----A---- C:\WINDOWS\win.ini
2016-02-15 10:28:59 ----RSD---- C:\WINDOWS\assembly
2016-02-15 09:49:36 ----D---- C:\WINDOWS\system32\config
2016-02-15 09:43:22 ----RSD---- C:\WINDOWS\Fonts
2016-02-15 09:22:37 ----D---- C:\WINDOWS\WinSxS
2016-02-15 00:28:12 ----D---- C:\WINDOWS\Registration
2016-02-15 00:28:09 ----D---- C:\Windows
2016-02-15 00:11:29 ----HD---- C:\$Windows.~BT
2016-02-14 23:29:56 ----D---- C:\WINDOWS\system32\catroot
2016-02-14 23:27:48 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-14 23:13:12 ----RD---- C:\WINDOWS\System32
2016-02-14 23:12:46 ----HD---- C:\ProgramData
2016-02-14 22:50:29 ----HD---- C:\Program Files\WindowsApps
2016-02-14 22:37:02 ----SD---- C:\WINDOWS\Downloaded Program Files
2016-02-14 22:36:36 ----D---- C:\WINDOWS\Help
2016-02-14 22:35:01 ----D---- C:\Program Files\Common Files
2016-02-14 21:47:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-14 21:19:36 ----SD---- C:\ProgramData\Microsoft
2016-02-14 21:12:53 ----D---- C:\WINDOWS\AUInstallAgent
2016-02-14 21:03:07 ----D---- C:\WINDOWS\system32\Tasks
2016-02-14 21:03:01 ----D---- C:\WINDOWS\Tasks
2016-02-14 20:34:07 ----SHD---- C:\System Volume Information
2016-02-14 20:17:10 ----D---- C:\WINDOWS\Logs
2016-02-14 20:07:04 ----RD---- C:\Program Files (x86)
2016-02-14 20:07:04 ----D---- C:\ProgramData\Norton
2016-02-14 20:04:12 ----D---- C:\WINDOWS\system32\Drivers
2016-02-14 09:08:19 ----HD---- C:\WINDOWS\ELAMBKUP
2016-02-13 20:29:30 ----D---- C:\WINDOWS\system32\wdi
2016-02-13 20:26:26 ----D---- C:\WINDOWS\CbsTemp
2016-02-13 20:24:18 ----D---- C:\WINDOWS\WinStore
2016-02-13 20:19:17 ----D---- C:\WINDOWS\system32\catroot2
2016-02-13 18:55:07 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2016-02-13 18:09:29 ----D---- C:\WINDOWS\system32\Boot
2016-02-13 18:09:02 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-02-13 18:07:58 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-02-13 18:07:58 ----D---- C:\WINDOWS\system32\migration
2016-02-13 18:07:57 ----D---- C:\WINDOWS\system32\wbem
2016-02-13 18:07:43 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-13 18:07:32 ----D---- C:\WINDOWS\apppatch
2016-02-13 18:07:16 ----D---- C:\Program Files\Windows Defender
2016-02-13 18:07:09 ----D---- C:\Program Files (x86)\Windows Defender
2016-02-13 18:06:46 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2016-02-13 18:06:45 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-02-13 18:06:45 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-13 18:06:42 ----D---- C:\WINDOWS\PolicyDefinitions
2016-02-13 18:06:40 ----D---- C:\WINDOWS\system32\sk-SK
2016-02-13 18:06:40 ----D---- C:\WINDOWS\system32\en-GB
2016-02-13 18:06:38 ----D---- C:\WINDOWS\system32\en-US
2016-02-13 18:06:38 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-13 18:03:32 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-13 18:03:15 ----D---- C:\WINDOWS\system32\oobe
2016-02-13 18:02:13 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-02-13 18:01:24 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-13 18:01:07 ----D---- C:\Program Files\Internet Explorer
2016-02-13 18:01:01 ----RD---- C:\WINDOWS\ToastData
2016-02-13 17:57:14 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-02-13 17:54:24 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-02-13 17:54:22 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-02-13 17:53:21 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-13 17:51:56 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-13 10:30:49 ----D---- C:\WINDOWS\servicing
2016-02-13 10:13:49 ----D---- C:\Program Files\Windows Photo Viewer
2016-02-13 10:13:49 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-02-13 10:13:47 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-02-13 10:13:37 ----D---- C:\WINDOWS\system32\Dism
2016-02-13 10:06:23 ----D---- C:\Program Files\Windows Journal
2016-02-12 23:27:43 ----SHD---- C:\$Recycle.Bin
2016-02-12 22:37:23 ----D---- C:\Program Files (x86)\MSBuild
2016-02-12 22:36:32 ----D---- C:\WINDOWS\ShellNew
2016-02-12 22:35:54 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-02-12 21:13:45 ----D---- C:\WINDOWS\system32\restore
2016-02-12 20:58:38 ----RD---- C:\Program Files (x86)\Online Services
2016-02-12 20:58:07 ----HD---- C:\SYSTEM.SAV
2016-02-12 20:46:11 ----D---- C:\WINDOWS\rescache
2016-02-12 20:44:48 ----D---- C:\Program Files\Windows NT
2016-02-12 20:42:25 ----D---- C:\WINDOWS\debug
2016-02-12 20:41:58 ----D---- C:\ProgramData\Hewlett-Packard
2016-02-12 20:41:51 ----D---- C:\WINDOWS\system32\Recovery
2016-02-12 20:39:53 ----RD---- C:\Users

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem4.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2012-07-10 35496]
R0 hpdskflt;@oem23.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2012-08-23 29600]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-28 650808]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R3 Accelerometer;@oem23.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2012-08-23 42400]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-09-18 10316800]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-09-18 370688]
R3 BtAudioBusSrv;@oem19.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\WINDOWS\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-01-09 51712]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\WINDOWS\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\WINDOWS\System32\Drivers\IvtUrbBtFlt.sys [2012-10-02 48608]
R3 IntcDAud;@oem6.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 intelkmd;intelkmd; C:\WINDOWS\system32\DRIVERS\igdpmd64.sys [2012-09-05 9004384]
R3 MEIx64;@oem9.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 netr28x;@oem24.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2013-12-04 2505904]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 rtbth;@oem25.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\WINDOWS\System32\drivers\rtbth.sys [2013-12-02 1204424]
R3 RTL8168;@oem12.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2012-07-31 690832]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-25 43832]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2012-08-20 542208]
R3 SynTP;@oem8.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-25 448312]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-05 210560]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
R3 WirelessButtonDriver;@oem22.inf,%ServiceDesc%;HP Wireless Button Driver Service; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [2012-08-31 20800]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-09-05 9004384]
S3 RSP2STOR;@oem10.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2012-07-04 269968]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2012-08-25 41272]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-09-18 239616]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2012-11-03 29696]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-26 1612552]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HPConnectedRemote;HP Connected Remote Service; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [2012-10-12 35744]
R2 hpsrv;@oem23.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2012-08-23 29600]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-09-07 35232]
R2 IAStorDataMgrSvc;Úložná technologie Intel® Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-09-28 14904]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-14 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-18 128896]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-20 323072]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-12-14 6889232]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-19 146184]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2016-02-14 1030600]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-27 43616]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-09-07 1001376]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-16 50864]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2012-09-05 277024]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\WINDOWS\system32\svchost.exe [2012-11-03 29696]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\WINDOWS\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\WINDOWS\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\WINDOWS\System32\drivers\BthHFHid.sys [2012-11-27 29952]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Log níže. Co trochu sleduju, tak disk neustále nad 80% vytížení, spíš 100
%. Procesor nad 50%, paměť 30-50%. Bez spuštěných aplikací...

# AdwCleaner v5.033 - Logfile created 16/02/2016 at 00:34:31
# Updated 07/02/2016 by Xplode
# Database : 2016-02-15.1 [Server]
# Operating system : Windows 8 (x64)
# Username : Jiří - PC-KAŠKOVI
# Running from : C:\Users\Jiří\Desktop\adwcleaner_5.033.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [658 bytes] ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

log z RSIT:

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 1426 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes

User: Default User

User: Jiří
->Temp folder emptied: 379825726 bytes
->Temporary Internet Files folder emptied: 294242250 bytes
->Google Chrome cache emptied: 251058269 bytes
->Flash cache emptied: 2290 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 112418200 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 1487 bytes

Total Files Cleaned = 989,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default

User: Default User

User: Jiří
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 02162016_202050

Files moved on Reboot...
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\2115B76B-30BA-40D8-82D1-6EF60AAD658C[2].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\heias[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\pub_sync[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\Pug[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\Pug[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\YUU714B6\context[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\UI0ZWFCK\mic[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\afr[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\afr[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\iconfont[1].eot moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\lsget[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\user_sync[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\viewtopic[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\0d37f78739366e0a_360p[1].dat moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\pixel[1] moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[3].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[4].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[4].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[5].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[6].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\B7YKNFKB\seznam_cz[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\B7YKNFKB\showad[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\context[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[2].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[3].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.

Registry entries deleted on Reboot...

Poprosím ještě o jeden RSIT.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 1426 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes

User: Default User

User: Jiří
->Temp folder emptied: 379825726 bytes
->Temporary Internet Files folder emptied: 294242250 bytes
->Google Chrome cache emptied: 251058269 bytes
->Flash cache emptied: 2290 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 112418200 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 1487 bytes

Total Files Cleaned = 989,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default

User: Default User

User: Jiří
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 02162016_202050

Files moved on Reboot...
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\2115B76B-30BA-40D8-82D1-6EF60AAD658C[2].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\heias[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\pub_sync[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\Pug[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ZW6GJF7T\Pug[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\YUU714B6\context[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\UI0ZWFCK\mic[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\afr[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\afr[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\iconfont[1].eot moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\lsget[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\user_sync[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\NR6CQFIS\viewtopic[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\0d37f78739366e0a_360p[1].dat moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\pixel[1] moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[3].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[4].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[4].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[5].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\GZFX72AN\Pug[6].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\B7YKNFKB\seznam_cz[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\B7YKNFKB\showad[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\context[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[1].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[1].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[2].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[2].htm moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\4J513LUK\Pug[3].gif moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.

Registry entries deleted on Reboot...

RSIT log je ten, který jste dal v 1. postu. Toto je OTM.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří at 2016-02-17 17:58:21
Microsoft Windows 8.1
System drive C: has 427 GB (61%) free of 697 GB
Total RAM: 3986 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:58:58, on 17. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\RunOnce: [LaunchWUApp] C:\AMD\WU-CCC2\ccc2_install\LaunchWLApp.bat
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connected Remote Service (HPConnectedRemote) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem16.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10878 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\msdtc.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2196 -s 628
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2984 -s 1684
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2300 -s 1600
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2584 -s 564
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 824 -s 1688
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1104 -s 1136
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2112 -s 1680
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3032 -s 1044
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1960 -s 976
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1332 -s 1052
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2140 -s 1472
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2428 -s 1064
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2172 -s 1036
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1452 -s 1040
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3392 -s 1652
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3688 -s 1740
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 4012 -s 1408
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3300 -s 1356
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3456 -s 576
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2260 -s 1112
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3236 -s 1644
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3556 -s 1040
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3876 -s 1692
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2216 -s 1036
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3272 -s 1212
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3536 -s 1136
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3140 -s 1032
C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3192 -s 1056
C:\WINDOWS\system32\DllHost.exe /Processid:{48DA6741-1BF0-4A44-8325-293086C79077}
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2276 -s 1700
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3252 -s 1084
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3280 -s 1664
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3348 -s 1140
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1152 -s 1668
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1420 -s 1056
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 932 -s 1060
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2176 -s 1660
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3772 -s 1048
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1512 -s 572
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 1416 -s 580
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2892 -s 1048
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3860 -s 1064
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3888 -s 1048
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 4056 -s 1712
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 2308 -s 1056
"C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe"
C:\WINDOWS\system32\WerFault.exe -u -p 3752 -s 1692
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskhost.exe TpmTasks
taskhostex.exe
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\System32\svchost.exe -k AppReadiness
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Classic Shell\ClassicStartMenu.exe" -autorun
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
taskhost.exe
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" -byrunkey
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
explorer.exe
C:\Windows\System32\skydrive.exe -Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\WINDOWS\System32\Taskmgr.exe" /3
"C:\PROGRA~1\AMD\CCC2\Install\CCC2_Install.exe" /S
C:\WINDOWS\system32\atiesrxx.exe
C:\AMD\WU-CCC2\ccc2_install\WULaunchApp.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\AMD\WU-CCC2\ccc2_install\Support64\CCC2App64.exe" -detection
C:\WINDOWS\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4704 CREDAT:267521 /prefetch:2
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\WINDOWS\system32\wuauclt.exe"
taskhost.exe USER
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4704 CREDAT:2823444 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding

"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4704 CREDAT:202180 /prefetch:2
C:\WINDOWS\system32\msfeedssync.exe sync
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\IE\4FSUXYIM\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12 809920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12 487360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12 687040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12 442816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12 809920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12 687040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-20 1664000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-25 2916152]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2015-11-12 161728]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-09-05 399392]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-09-05 441888]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-19 371976]
"CLVirtualDrive"=C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2012-09-10 491632]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-07-13 93296]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2012-09-07 581024]
"HP CoolSense"=C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2012-09-14 1342008]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"LaunchWUApp"=C:\AMD\WU-CCC2\ccc2_install\LaunchWLApp.bat [2014-07-01 73]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-02-17 09:21:02 ----HD---- C:\OneDriveTemp
2016-02-17 09:19:55 ----A---- C:\WINDOWS\system32\drivers\amdkmpfd.sys
2016-02-17 08:55:48 ----D---- C:\Users\Jiří\AppData\Roaming\Identities
2016-02-17 01:55:36 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2016-02-17 01:19:47 ----SD---- C:\Users\Jiří\AppData\Roaming\Microsoft
2016-02-17 01:12:18 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-02-17 01:07:15 ----D---- C:\Program Files (x86)\ATI Technologies
2016-02-17 01:04:06 ----A---- C:\WINDOWS\system32\EEP64A.dll
2016-02-17 01:04:06 ----A---- C:\WINDOWS\system32\EEL64A.dll
2016-02-17 01:04:06 ----A---- C:\WINDOWS\system32\EED64A.dll
2016-02-17 01:04:06 ----A---- C:\WINDOWS\system32\EEA64A.dll
2016-02-17 01:04:05 ----A---- C:\WINDOWS\system32\stlang64.dll
2016-02-17 01:04:05 ----A---- C:\WINDOWS\sttray64.exe
2016-02-17 01:03:57 ----D---- C:\WINDOWS\system32\SRSLabs
2016-02-17 01:03:39 ----D---- C:\Program Files\IDT
2016-02-17 01:02:55 ----D---- C:\Program Files\Common Files\ATI Technologies
2016-02-17 01:01:35 ----D---- C:\Program Files\AMD
2016-02-17 01:00:47 ----D---- C:\Program Files\Synaptics
2016-02-17 01:00:11 ----D---- C:\WINDOWS\Prefetch
2016-02-17 00:57:00 ----DC---- C:\WINDOWS\Panther
2016-02-17 00:56:21 ----D---- C:\Windows.old
2016-02-17 00:32:04 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-02-17 00:32:04 ----D---- C:\Program Files (x86)\MSBuild
2016-02-17 00:32:03 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2016-02-17 00:32:03 ----D---- C:\Program Files\Reference Assemblies
2016-02-17 00:32:03 ----D---- C:\Program Files\MSBuild
2016-02-17 00:32:03 ----D---- C:\inetpub
2016-02-17 00:30:55 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-17 00:30:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-02-17 00:30:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-17 00:30:53 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-17 00:30:52 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-17 00:30:50 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-17 00:30:14 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2016-02-17 00:30:13 ----A---- C:\WINDOWS\system32\sdbinst.exe
2016-02-15 11:20:53 ----D---- C:\Program Files\trend micro
2016-02-14 23:12:46 ----D---- C:\ProgramData\Package Cache
2016-02-14 22:40:01 ----D---- C:\ProgramData\FLEXnet
2016-02-14 22:35:01 ----D---- C:\Program Files\Common Files\Macrovision Shared
2016-02-14 22:32:52 ----D---- C:\Users\Jiří\AppData\Roaming\Autodesk
2016-02-14 22:32:52 ----D---- C:\ProgramData\Autodesk
2016-02-14 22:32:52 ----D---- C:\Program Files\Common Files\Autodesk Shared
2016-02-14 22:32:52 ----D---- C:\Program Files\AutoCAD 2010
2016-02-14 21:05:18 ----D---- C:\Users\Jiří\AppData\Roaming\Macromedia
2016-02-14 19:59:02 ----D---- C:\Program Files\Common Files\AV
2016-02-13 20:24:18 ----D---- C:\WINDOWS\system32\AutoUpdateLicense
2016-02-13 20:23:40 ----A---- C:\WINDOWS\system32\AutoUpdate.exe
2016-02-13 18:05:36 ----D---- C:\WINDOWS\Migration
2016-02-13 04:57:47 ----D---- C:\WINDOWS\system32\MRT
2016-02-13 04:57:35 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-13 02:36:18 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 00:17:27 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-02-13 00:17:26 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-02-12 23:10:04 ----D---- C:\Users\Jiří\AppData\Roaming\TeamViewer
2016-02-12 23:09:50 ----D---- C:\Program Files (x86)\TeamViewer
2016-02-12 22:57:41 ----D---- C:\Users\Jiří\AppData\Roaming\hpqlog
2016-02-12 22:56:45 ----D---- C:\Users\Jiří\AppData\Roaming\Hewlett-Packard
2016-02-12 22:46:42 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2016-02-12 22:46:42 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2016-02-12 22:46:39 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2016-02-12 22:46:39 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2016-02-12 22:44:22 ----D---- C:\direct
2016-02-12 22:37:46 ----D---- C:\Program Files (x86)\Microsoft Works
2016-02-12 22:36:38 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2016-02-12 22:33:18 ----D---- C:\Program Files\Microsoft Office
2016-02-12 22:33:14 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2016-02-12 22:32:13 ----D---- C:\ProgramData\Microsoft Help
2016-02-12 22:14:18 ----D---- C:\ProgramData\ClassicShell
2016-02-12 22:13:53 ----D---- C:\Users\Jiří\AppData\Roaming\ClassicShell
2016-02-12 22:13:03 ----D---- C:\Program Files\Classic Shell
2016-02-12 22:06:44 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2016-02-12 22:06:44 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2016-02-12 22:06:43 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2016-02-12 22:06:42 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2016-02-12 22:06:40 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2016-02-12 22:06:39 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2016-02-12 22:06:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2016-02-12 22:06:38 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2016-02-12 22:06:37 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2016-02-12 22:06:36 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2016-02-12 22:06:36 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2016-02-12 22:06:34 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2016-02-12 22:06:32 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2016-02-12 22:06:30 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2016-02-12 22:06:29 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2016-02-12 22:06:28 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2016-02-12 22:06:27 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2016-02-12 22:06:26 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2016-02-12 22:06:26 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2016-02-12 22:06:25 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2016-02-12 22:06:23 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2016-02-12 22:06:23 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2016-02-12 22:06:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2016-02-12 22:06:20 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2016-02-12 22:06:20 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2016-02-12 22:06:19 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2016-02-12 22:06:19 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2016-02-12 22:06:18 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2016-02-12 22:06:18 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2016-02-12 22:06:17 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2016-02-12 22:06:17 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2016-02-12 22:06:16 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2016-02-12 22:06:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2016-02-12 22:06:15 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2016-02-12 22:06:14 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2016-02-12 22:06:14 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2016-02-12 22:06:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2016-02-12 22:06:11 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_34.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2016-02-12 22:06:10 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2016-02-12 22:06:09 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2016-02-12 22:06:08 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2016-02-12 22:06:07 ----A---- C:\WINDOWS\system32\d3dx10.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2016-02-12 22:06:06 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2016-02-12 22:06:05 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2016-02-12 22:06:05 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2016-02-12 22:06:04 ----A---- C:\WINDOWS\SYSWOW64\xinput1_1.dll
2016-02-12 22:06:04 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2016-02-12 22:06:03 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_1.dll
2016-02-12 22:06:03 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2016-02-12 22:05:57 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_26.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_25.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2016-02-12 22:05:56 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2016-02-12 22:05:55 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_24.dll
2016-02-12 22:05:55 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2016-02-12 21:45:14 ----D---- C:\Program Files (x86)\Microsoft
2016-02-12 21:37:49 ----D---- C:\Program Files (x86)\Google
2016-02-12 21:15:39 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2016-02-12 21:15:39 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2016-02-12 21:15:38 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2016-02-12 21:15:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_30.dll
2016-02-12 21:15:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2016-02-12 21:00:50 ----D---- C:\Users\Jiří\AppData\Roaming\ATI
2016-02-12 20:58:47 ----D---- C:\Users\Jiří\AppData\Roaming\Adobe
2016-02-12 20:56:24 ----D---- C:\Users\Jiří\AppData\Roaming\Synaptics
2016-02-12 20:55:23 ----HD---- C:\Program Files (x86)\Uninstall Information
2016-02-12 20:52:11 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Šablony
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Plocha
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Nabídka Start
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Dokumenty
2016-02-12 20:44:48 ----SHD---- C:\ProgramData\Data aplikací
2016-02-12 19:58:31 ----HD---- C:\$SysReset

======List of files/folders modified in the last 1 month======

2016-02-17 17:50:49 ----D---- C:\WINDOWS\system32\wdi
2016-02-17 14:00:00 ----D---- C:\WINDOWS\system32\sru
2016-02-17 10:49:29 ----D---- C:\WINDOWS\Temp
2016-02-17 10:05:45 ----D---- C:\Windows
2016-02-17 10:05:40 ----D---- C:\WINDOWS\CbsTemp
2016-02-17 09:49:38 ----RD---- C:\WINDOWS\System32
2016-02-17 09:49:38 ----D---- C:\WINDOWS\Inf
2016-02-17 09:49:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-17 09:47:25 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-17 09:47:25 ----D---- C:\WINDOWS\system32\drivers
2016-02-17 09:45:26 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-17 09:22:40 ----SD---- C:\ProgramData\Microsoft
2016-02-17 09:22:20 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-17 09:22:18 ----RD---- C:\WINDOWS\assembly
2016-02-17 09:20:42 ----SHD---- C:\WINDOWS\Installer
2016-02-17 09:20:41 ----RD---- C:\Program Files
2016-02-17 09:20:23 ----HD---- C:\ProgramData
2016-02-17 09:20:23 ----D---- C:\WINDOWS\SysWOW64
2016-02-17 09:20:16 ----SHD---- C:\$Recycle.Bin
2016-02-17 09:19:59 ----D---- C:\WINDOWS\system32\catroot
2016-02-17 09:15:22 ----D---- C:\WINDOWS\system32\Tasks
2016-02-17 09:12:45 ----D---- C:\Program Files\Common Files
2016-02-17 09:12:44 ----D---- C:\Program Files (x86)\Common Files
2016-02-17 09:12:39 ----D---- C:\Program Files (x86)\Intel
2016-02-17 09:10:39 ----HD---- C:\Program Files\WindowsApps
2016-02-17 09:08:18 ----A---- C:\WINDOWS\SYSWOW64\LOCALSERVICE.INI
2016-02-17 09:07:23 ----A---- C:\WINDOWS\SYSWOW64\bscs.ini
2016-02-17 09:03:29 ----D---- C:\WINDOWS\system32\config
2016-02-17 08:56:00 ----D---- C:\WINDOWS\AppReadiness
2016-02-17 02:04:23 ----SHD---- C:\System Volume Information
2016-02-17 01:58:12 ----D---- C:\WINDOWS\rescache
2016-02-17 01:56:09 ----D---- C:\WINDOWS\Registration
2016-02-17 01:53:26 ----D---- C:\WINDOWS\system32\LogFiles
2016-02-17 01:53:15 ----RSD---- C:\WINDOWS\Media
2016-02-17 01:52:01 ----D---- C:\WINDOWS\system32\catroot2
2016-02-17 01:50:06 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-02-17 01:39:57 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-02-17 01:39:47 ----D---- C:\WINDOWS\system32\Sysprep
2016-02-17 01:38:48 ----D---- C:\WINDOWS\sk
2016-02-17 01:38:48 ----D---- C:\WINDOWS\ShellNew
2016-02-17 01:38:45 ----RSD---- C:\WINDOWS\Fonts
2016-02-17 01:38:45 ----D---- C:\WINDOWS\Help
2016-02-17 01:38:45 ----D---- C:\WINDOWS\en-GB
2016-02-17 01:38:45 ----D---- C:\WINDOWS\cs
2016-02-17 01:38:14 ----D---- C:\WINDOWS\WinSxS
2016-02-17 01:34:09 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-02-17 01:34:09 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-02-17 01:34:09 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-02-17 01:34:09 ----D---- C:\WINDOWS\SYSWOW64\sda
2016-02-17 01:34:08 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-02-17 01:34:08 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-02-17 01:34:08 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-02-17 01:34:05 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-02-17 01:34:04 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-02-17 01:34:04 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-17 01:34:03 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-02-17 01:34:03 ----D---- C:\WINDOWS\SYSWOW64\Adobe
2016-02-17 01:33:58 ----D---- C:\WINDOWS\system32\WCN
2016-02-17 01:33:57 ----D---- C:\WINDOWS\system32\spool
2016-02-17 01:33:46 ----D---- C:\WINDOWS\system32\oobe
2016-02-17 01:33:46 ----D---- C:\WINDOWS\system32\MUI
2016-02-17 01:33:46 ----D---- C:\WINDOWS\system32\IME
2016-02-17 01:33:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2016-02-17 01:33:44 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-17 01:30:51 ----D---- C:\WINDOWS\IME
2016-02-17 01:30:48 ----SD---- C:\WINDOWS\Downloaded Program Files
2016-02-17 01:30:48 ----D---- C:\WINDOWS\DigitalLocker
2016-02-17 01:28:45 ----RD---- C:\Users
2016-02-17 01:28:44 ----D---- C:\ProgramData\PRICache
2016-02-17 01:28:37 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-02-17 01:28:37 ----RD---- C:\Program Files (x86)
2016-02-17 01:28:37 ----D---- C:\Program Files (x86)\Windows Media Player
2016-02-17 01:28:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-02-17 01:28:15 ----SHD---- C:\Program Files\Windows Sidebar
2016-02-17 01:28:14 ----D---- C:\Program Files\Windows Media Player
2016-02-17 01:28:10 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-17 01:22:28 ----D---- C:\WINDOWS\system32\Recovery
2016-02-17 01:12:41 ----D---- C:\WINDOWS\Logs
2016-02-17 00:59:23 ----D---- C:\WINDOWS\debug
2016-02-17 00:56:52 ----SHD---- C:\Recovery
2016-02-17 00:36:02 ----SD---- C:\WINDOWS\system32\Microsoft
2016-02-17 00:32:03 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-02-17 00:32:03 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-02-17 00:32:03 ----D---- C:\WINDOWS\system32\migration
2016-02-17 00:32:03 ----D---- C:\WINDOWS\system32\inetsrv
2016-02-17 00:31:58 ----A---- C:\WINDOWS\system32\iisRtl.dll
2016-02-17 00:31:57 ----A---- C:\WINDOWS\system32\wamregps.dll
2016-02-17 00:31:57 ----A---- C:\WINDOWS\system32\iisrstap.dll
2016-02-17 00:31:57 ----A---- C:\WINDOWS\system32\iisreset.exe
2016-02-17 00:31:57 ----A---- C:\WINDOWS\system32\ahadmin.dll
2016-02-17 00:31:57 ----A---- C:\WINDOWS\system32\admwprox.dll
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2016-02-17 00:31:55 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2016-02-17 00:30:15 ----D---- C:\WINDOWS\apppatch
2016-02-16 21:18:10 ----HD---- C:\$Windows.~BT
2016-02-16 20:34:03 ----A---- C:\WINDOWS\SYSWOW64\LOCALDEVICE.INI
2016-02-16 00:34:31 ----D---- C:\AdwCleaner
2016-02-15 10:36:36 ----D---- C:\Program Files (x86)\Microsoft Office
2016-02-15 10:29:09 ----A---- C:\WINDOWS\win.ini
2016-02-14 23:00:48 ----D---- C:\WINDOWS\AUInstallAgent
2016-02-14 20:07:04 ----D---- C:\ProgramData\Norton
2016-02-14 20:06:58 ----HD---- C:\WINDOWS\ELAMBKUP
2016-02-12 20:58:38 ----RD---- C:\Program Files (x86)\Online Services
2016-02-12 20:58:07 ----HD---- C:\SYSTEM.SAV
2016-02-12 20:41:58 ----D---- C:\ProgramData\Hewlett-Packard

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;@oem16.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2012-08-23 29600]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-28 650808]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R3 Accelerometer;@oem16.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2012-08-23 42400]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 AtiDCM;AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [2014-03-13 28416]
R3 BtAudioBusSrv;@oem11.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\WINDOWS\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2014-11-21 53248]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\WINDOWS\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-11-21 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2014-11-21 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-11-21 81920]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\WINDOWS\System32\Drivers\IvtUrbBtFlt.sys [2012-10-02 48608]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;@oem22.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 MEIx64;@oem25.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 netr28x;@oem17.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2013-12-04 2505904]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-11-21 167424]
R3 rtbth;@oem18.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\WINDOWS\System32\drivers\rtbth.sys [2013-12-02 1204424]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-25 43832]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2012-08-20 542208]
R3 SynTP;@oem24.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-25 448312]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-11-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S0 amdkmpfd;@oem29.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-11-21 1198080]
S3 intelkmd;intelkmd; C:\WINDOWS\system32\DRIVERS\igdpmd64.sys [2012-09-05 9004384]
S3 RSP2STOR;@oem3.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2012-07-04 269968]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2012-08-25 41272]
S3 WDC_SAM;@oem30.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2015-11-12 26880]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
R2 hpsrv;@oem16.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2012-08-23 29600]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-09-07 35232]
R2 IAStorDataMgrSvc;Úložná technologie Intel® Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-09-28 14904]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-14 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-18 128896]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-20 323072]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-12-14 6889232]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-19 146184]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-09-07 1001376]
S2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-26 1612552]
S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 HPConnectedRemote;HP Connected Remote Service; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [2012-10-12 35744]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2016-02-14 1030600]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\Jiří.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Myslím, že se nic nezměnilo, disk neustále na 100%...

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17. 2. 2016
Čas skenování: 22:08
Protokol:
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.02.17.06
Databáze rootkitů: v2016.02.17.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Jiří

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 418849
Uplynulý čas: 40 min, 8 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 6
PUP.Optional.InstallBrain, C:\Users\Jiří\Downloads\VideoPerformerSetup.exe, , [7a50c69b1980999d2747c015b74943bd],
PUP.Optional.ClientConnect, C:\Users\Jiří\Downloads\bsplayer267-1076 (1).exe, , [d8f28cd5603932048d30359832ce20e0],
PUP.Optional.ClientConnect, C:\Users\Jiří\Downloads\bsplayer267-1076.exe, , [4e7c9ac7f3a6bc7ad6e75f6e58a80af6],
PUP.Optional.Ilivid, C:\Users\Jiří\Downloads\iLividSetup_C-r362-t-bc.exe, , [05c511507128e84eb6098953b34de020],
PUP.Optional.Ilivid, C:\Users\Jiří\Downloads\iLividSetup_D-r362-t-bc.exe, , [3e8cc69b049512245b643e9eb44cde22],
PUP.Optional.OneClickDownloader, C:\Users\Jiří\Downloads\DownloadSetup.exe, , [00ca5f02aeeb0531c3ec5fdcce338a76],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Všechny nalezené položky smažte.