V čem by mohl být problém ?

Zpráva

Cassper · #1 Příspěvek od **Cassper** » 13 bře 2016 21:46

Mohl by se prosím někdo podívat na soubor s logem v příloze a říci mi, jestli ta něco není špatně ?

Počítač se poslední týden chová divně. Čas od času "vytuhne". Nebo tedy resp. dojde k následujícímu.

Myš přestane reagovat na klikání. ... Po chvíli místo klikání se ozve varovné pípnutí, ala před mnoha lety PC speaker. ... Po dalších pár vteřinách začne myš lagovat v pohybu a ono varovné pípání se ozve i při pohybu myši. ... Počítač ale nevyhodí žádný error, ale v pohodě jede dál. Přes klávesnici můžu dál pracovat, vše běží stejně rychle (jako např. otevření IE a brouzdání). Ale ona myš už nenaskočí, takže pomůže jen reset.

Hlavně se to děje od úterý, kdy vyšla nová hra The Division, kterou jsem si koupil a hraju. Předtím jsem nikdy nic takového nezaznamenal.

K výše popsané chybě dojde hlavně v průběhu hry, aniž bych přesně řekl kdy. Jednou po dvou minutách, jindy po hodině, jindy po dvou hodinách stále vše OK. ... Ale už se mi i stalo, že k této události došlo při pouštění filmu, nebo normálním procházení webu. Nemám tedy žádný spolehlivý tip, co by mohlo být spouštěčem.

Počítač jsem prohnal SMART toolem, který na SSD disku nic nenašel. Zkusil jsem 4 hodiny memtest a taky bez problému. CCcleaner odstranil pár hloupostí, ale myslím, že nic zásadního. To samé Spybot. ... Avast, který mi jinak stále běží, nenašel nic.

Už tedy nevím co s tím a uvítám každou radu. Díky moc.

Cassper · #2 Příspěvek od **Cassper** » 13 bře 2016 21:47

Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin Kašpar at 2016-03-13 21:38:37
Microsoft Windows 10 Pro
System drive C: has 369 GB (78%) free of 476 GB
Total RAM: 8150 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:38:38, on 13.03.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\trend micro\Martin Kašpar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: Install LastPass FF RunOnce.lnk = C:\Program Files (x86)\Common Files\lpuninstall.exe
O4 - Global Startup: Install LastPass IE RunOnce.lnk = C:\Program Files (x86)\Common Files\lpuninstall.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: LastPass - file://C:\Users\Martin Kašpar\AppData\LocalLow\LastPass\context.html?cmd=lastpass
O8 - Extra context menu item: LastPass Vyplňování formulářů - file://C:\Users\Martin Kašpar\AppData\LocalLow\LastPass\context.html?cmd=fillforms
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\RpcAgentSrv.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @oem4.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12215 bytes

======Listing Processes======

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-43995b75-fa8e-4fa3-aeee-9335ae5de0f4 -SystemEventPortName:HostProcess-0572c425-e933-47c5-a154-ce369f168d41 -IoCancelEventPortName:HostProcess-aedd209f-9579-4b87-92aa-3c8e226037cb -NonStateChangingEventPortName:HostProcess-84558400-b90e-41f9-9df4-069807b5f7aa -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ae763aed-e7c6-4df6-9031-2610672d6239 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {62966833-5111-46bb-bab88b109c03adc8}
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\Windows\system32\viakaraokesrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\wbem\wmiprvse.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Martin KaĹˇpar\AppData\Local\Steam\htmlcache" -steampid=6924 -buildid=1457636973 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
"C:\Program Files (x86)\totalcmd\TOTALCMD64.EXE"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.302.8200.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.XboxApp_14.14.16008.0_x64__8wekyb3d8bbwe\XboxApp.exe" -ServerName:Microsoft.XboxApp.AppXf18qzvvf02y898dj8d1frhp2562vbpn5.mca
taskhostw.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\Windows\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:6692 CREDAT:140545 EDGEHOST /prefetch:6
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1904322886-2338088730-148262573-100112_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1904322886-2338088730-148262573-100112 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:6692 CREDAT:206086 EDGEHOST /prefetch:6
"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE"
C:\Windows\System32\PickerHost.exe -Embedding
taskeng.exe {A7951FE1-5C58-4362-8E89-0A749459193D}
"C:\Windows\system32\SearchFilterHost.exe" 0 592 596 604 8192 600

C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Martin Kašpar\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin Kašpar\AppData\Roaming\Mozilla\Firefox\Profiles\zo3mq5xl.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@lastpass.com/NPLastPass]
"Description"=
"Path"=C:\Program Files (x86)\LastPass\nplastpass64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@lastpass.com/NPLastPass]
"Description"=
"Path"=C:\Program Files (x86)\LastPass\nplastpass64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

C:\Users\Martin Kašpar\AppData\Roaming\Mozilla\Firefox\Profiles\zo3mq5xl.default\extensions\
support@lastpass.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-08 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-12-26 3140120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-08 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-12-26 2283032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-12-26 3140120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-12-26 2283032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-17 2789248]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-02-17 1903344]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26 500936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-11 551104]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-03-10 3074128]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127"=C:\Windows\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-09 7137664]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Install LastPass FF RunOnce.lnk - C:\Program Files (x86)\Common Files\lpuninstall.exe
Install LastPass IE RunOnce.lnk - C:\Program Files (x86)\Common Files\lpuninstall.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-13 21:31:08 ----D---- C:\rsit
2016-03-13 21:31:08 ----D---- C:\Program Files\trend micro
2016-03-13 20:21:52 ----D---- C:\Program Files\Common Files\AV
2016-03-13 20:20:47 ----A---- C:\Windows\system32\sdnclean64.exe
2016-03-13 20:20:46 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-03-13 20:20:43 ----AD---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-03-13 20:17:39 ----AD---- C:\Program Files\CCleaner
2016-03-13 20:14:21 ----HD---- C:\OneDriveTemp
2016-03-13 18:40:27 ----D---- C:\Program Files\SiSoftware
2016-03-13 11:20:33 ----AD---- C:\Program Files (x86)\CrystalDiskInfo
2016-03-12 19:26:09 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-03-12 19:26:04 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-03-12 19:26:04 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-03-12 19:26:04 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-03-12 19:26:04 ----A---- C:\Windows\system32\vulkan-1.dll
2016-03-12 19:26:02 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-12 19:25:36 ----D---- C:\Windows\LastGood.Tmp
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncMFThevc.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvDecMFTMjpeg.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvopencl.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvoglv64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvmcumd.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvinitx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvIFR64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvFBC64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncMFThevc.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvdispgenco6436451.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvdispco6436451.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvDecMFTMjpeg.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcuvid.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcuda.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcompiler.dll
2016-03-09 17:53:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-03-08 20:16:25 ----A---- C:\Windows\system32\edgehtml.dll
2016-03-08 20:16:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-03-08 20:16:24 ----A---- C:\Windows\system32\mshtml.dll
2016-03-08 20:16:23 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2016-03-08 20:16:22 ----A---- C:\Windows\system32\WSService.dll
2016-03-08 20:16:22 ----A---- C:\Windows\system32\wmp.dll
2016-03-08 20:16:21 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-08 20:16:20 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-03-08 20:16:20 ----A---- C:\Windows\system32\Chakra.dll
2016-03-08 20:16:19 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2016-03-08 20:16:19 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-03-08 20:16:19 ----A---- C:\Windows\system32\windows.storage.dll
2016-03-08 20:16:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-08 20:16:18 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2016-03-08 20:16:18 ----A---- C:\Windows\system32\wuaueng.dll
2016-03-08 20:16:17 ----A---- C:\Windows\system32\win32kfull.sys
2016-03-08 20:16:17 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-03-08 20:16:17 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2016-03-08 20:16:16 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2016-03-08 20:16:16 ----A---- C:\Windows\system32\dosvc.dll
2016-03-08 20:16:16 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2016-03-08 20:16:15 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2016-03-08 20:16:15 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\WWAHost.exe
2016-03-08 20:16:15 ----A---- C:\Windows\system32\win32kbase.sys
2016-03-08 20:16:15 ----A---- C:\Windows\system32\SRHInproc.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\ole32.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\KernelBase.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\diagtrack.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\ContactApis.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\WMPDMC.exe
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\SRHInproc.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\SRH.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\Unistore.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\dxgi.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2016-03-08 20:16:14 ----A---- C:\Windows\system32\AppointmentApis.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\wer.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\AppxPackaging.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\SRH.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\mfds.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\invagent.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\fontdrvhost.exe
2016-03-08 20:16:13 ----A---- C:\Windows\system32\ClipSVC.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\AppxPackaging.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\wer.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\msv1_0.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\mfsvr.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\deviceaccess.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\dafBth.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\PackageStateRoaming.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\WMPDMC.exe
2016-03-08 20:16:11 ----A---- C:\Windows\system32\MPSSVC.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\EmailApis.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\CallHistoryClient.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\atmfd.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\AppointmentActivation.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\VCardParser.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\ChatApis.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-03-08 20:16:10 ----A---- C:\Windows\system32\AuthBroker.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2016-03-08 20:16:09 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2016-03-08 20:16:09 ----A---- C:\Windows\SYSWOW64\cemapi.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\sqmapi.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\sharemediacpl.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\PackageStateRoaming.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\domgmt.dll
2016-03-08 20:16:08 ----A---- C:\Windows\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-08 20:16:08 ----A---- C:\Windows\SYSWOW64\fwbase.dll
2016-03-08 20:16:08 ----A---- C:\Windows\system32\UserDataAccountApis.dll
2016-03-08 20:16:08 ----A---- C:\Windows\system32\cemapi.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\storewuauth.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\PimIndexMaintenance.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\AuthHost.exe
2016-03-08 20:16:07 ----A---- C:\Windows\system32\AppointmentActivation.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\VCardParser.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-03-08 20:16:06 ----A---- C:\Windows\system32\wsqmcons.exe
2016-03-08 20:16:06 ----A---- C:\Windows\system32\wermgr.exe
2016-03-08 20:16:06 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\POSyncServices.dll
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\ExSMime.dll
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\AppxSip.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\PhoneCallHistoryApis.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\AppxSysprep.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\aeinv.dll
2016-03-08 20:16:04 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2016-03-08 20:16:04 ----A---- C:\Windows\SYSWOW64\ExtrasXmlParser.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\wpninprc.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\seclogon.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\PimIndexMaintenanceClient.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\fwbase.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\FirewallAPI.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\ExSMime.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\dssvc.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\devinv.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\AppxSip.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\profext.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\CallHistoryClient.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\Windows.Devices.Scanners.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\wfapigp.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataLanguageUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\POSyncServices.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\ExtrasXmlParser.dll
2016-03-08 20:16:02 ----A---- C:\Windows\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-08 20:16:02 ----A---- C:\Windows\SYSWOW64\UserDataLanguageUtil.dll
2016-03-08 20:16:02 ----A---- C:\Windows\system32\profext.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\wfapigp.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\werui.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\fwpolicyiomgr.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\werui.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\vaultsvc.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\vaultcli.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\UserDataService.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\scapi.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\Chakradiag.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\fwpolicyiomgr.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\fontsub.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\configurationclient.dll
2016-03-08 20:16:00 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-03-08 20:16:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-03-08 20:16:00 ----A---- C:\Windows\system32\atmlib.dll
2016-03-08 15:44:05 ----A---- C:\Windows\system32\aswBoot.exe
2016-03-08 15:44:03 ----A---- C:\Windows\avastSS.scr
2016-03-02 17:36:18 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 17:36:17 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 17:36:15 ----A---- C:\Windows\system32\shell32.dll
2016-03-02 17:36:11 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-03-02 17:36:10 ----A---- C:\Windows\system32\twinui.dll
2016-03-02 17:36:08 ----A---- C:\Windows\system32\ieframe.dll
2016-03-02 17:36:07 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-03-02 17:36:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-03-02 17:36:07 ----A---- C:\Windows\system32\dwmcore.dll
2016-03-02 17:36:06 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2016-03-02 17:36:05 ----A---- C:\Windows\system32\wininet.dll
2016-03-02 17:36:04 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 17:36:04 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\mfcore.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\jscript9.dll
2016-03-02 17:36:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\MFMediaEngine.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\d3d11.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\CoreUIComponents.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\audiosrv.dll
2016-03-02 17:36:02 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 17:36:02 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\iertutil.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\CertEnroll.dll
2016-03-02 17:36:01 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\XblGameSave.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\urlmon.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\schedsvc.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\InputService.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-03-02 17:36:00 ----A---- C:\Windows\system32\XblAuthManager.dll
2016-03-02 17:36:00 ----A---- C:\Windows\system32\mstscax.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\Windows.Media.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\Windows.AccountsControl.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\enterprisecsps.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\NetSetupEngine.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\modernexecserver.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2016-03-02 17:35:57 ----A---- C:\Windows\system32\ntdll.dll
2016-03-02 17:35:57 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2016-03-02 17:35:56 ----A---- C:\Windows\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 17:35:56 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\wwansvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\SmsRouterSvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\ngcsvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\AudioSes.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\SettingSyncCore.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\NetSetupShim.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\mfsrcsnk.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\Windows.UI.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\QuickActionsDataModel.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\generaltel.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\wcmsvc.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\SharedStartModel.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\SettingSync.dll
2016-03-02 17:35:52 ----A---- C:\Windows\SYSWOW64\InputService.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\wlansvc.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\winload.exe
2016-03-02 17:35:52 ----A---- C:\Windows\system32\usbmon.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\DeviceEnroller.exe
2016-03-02 17:35:52 ----A---- C:\Windows\system32\audiodg.exe
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2016-03-02 17:35:51 ----A---- C:\Windows\system32\winresume.exe
2016-03-02 17:35:51 ----A---- C:\Windows\system32\localspl.dll
2016-03-02 17:35:51 ----A---- C:\Windows\system32\drivers\sdbus.sys
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2016-03-02 17:35:50 ----A---- C:\Windows\system32\MSFlacDecoder.dll
2016-03-02 17:35:50 ----A---- C:\Windows\system32\drivers\bridge.sys
2016-03-02 17:35:49 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2016-03-02 17:35:49 ----A---- C:\Windows\SYSWOW64\NetSetupShim.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\uDWM.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\thumbcache.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\taskschd.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\NetSetupSvc.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\msvproc.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\bisrv.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-02 17:35:48 ----A---- C:\Windows\SYSWOW64\msvproc.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\StorSvc.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\netlogon.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2016-03-02 17:35:48 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-03-02 17:35:47 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\wuuhext.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\wifiprofilessettinghandler.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\WiFiDisplay.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\spoolsv.exe
2016-03-02 17:35:47 ----A---- C:\Windows\system32\ipnathlp.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\InstallAgent.exe
2016-03-02 17:35:47 ----A---- C:\Windows\system32\drivers\xinputhid.sys
2016-03-02 17:35:47 ----A---- C:\Windows\system32\DisplayManager.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\DeviceCensus.exe
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2016-03-02 17:35:46 ----A---- C:\Windows\system32\MDEServer.exe
2016-03-02 17:35:46 ----A---- C:\Windows\system32\MCRecvSrc.dll
2016-03-02 17:35:46 ----A---- C:\Windows\system32\flvprophandler.dll
2016-03-02 17:35:46 ----A---- C:\Windows\system32\drivers\xboxgip.sys
2016-03-02 17:35:46 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-03-02 17:35:45 ----A---- C:\Windows\SYSWOW64\WiFiDisplay.dll
2016-03-02 17:35:45 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\SyncController.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\SMSRouter.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\drivers\acpi.sys
2016-03-02 17:35:44 ----A---- C:\Windows\SYSWOW64\SyncController.dll
2016-03-02 17:35:44 ----A---- C:\Windows\SYSWOW64\MSFlacDecoder.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\wlanapi.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\MDMAppInstaller.exe
2016-03-02 17:35:44 ----A---- C:\Windows\system32\drivers\appid.sys
2016-03-02 17:35:43 ----A---- C:\Windows\system32\psmsrv.dll
2016-03-02 17:35:43 ----A---- C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 17:35:42 ----A---- C:\Windows\SYSWOW64\DisplayManager.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\wlansec.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\TextInputFramework.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\ngckeyenum.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2016-03-02 17:35:42 ----A---- C:\Windows\system32\accountaccessor.dll
2016-03-02 17:35:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\wlansvcpal.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\wlanmsm.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\WiFiConfigSP.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\provpackageapidll.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\MBMediaManager.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\wininetlui.dll
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\wininetlui.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\wfdprov.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\TimeBrokerClient.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\srpapi.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\irmon.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\TimeBrokerClient.dll
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\InputLocaleManager.dll
2016-03-02 17:35:39 ----A---- C:\Windows\system32\LaunchWinApp.exe
2016-03-02 17:35:39 ----A---- C:\Windows\system32\InputLocaleManager.dll
2016-03-02 17:35:39 ----A---- C:\Windows\system32\bcastdvr.exe
2016-03-02 17:35:39 ----A---- C:\Windows\system32\AppCapture.dll
2016-02-21 21:13:29 ----AD---- C:\Program Files (x86)\Overwolf
2016-02-21 21:13:20 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\TS3Client
2016-02-14 17:16:38 ----D---- C:\Windows\Minidump
2016-02-14 02:47:02 ----A---- C:\Windows\SYSWOW64\vulkan-1-1-0-3-0.dll
2016-02-14 02:46:26 ----A---- C:\Windows\system32\vulkan-1-1-0-3-0.dll
2016-02-14 02:45:46 ----A---- C:\Windows\SYSWOW64\vulkaninfo-1-1-0-3-0.exe
2016-02-14 02:45:26 ----A---- C:\Windows\system32\vulkaninfo-1-1-0-3-0.exe

======List of files/folders modified in the last 1 month======

2016-03-13 21:36:26 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\Skype
2016-03-13 21:31:44 ----D---- C:\Windows\Prefetch
2016-03-13 21:31:08 ----RD---- C:\Program Files
2016-03-13 21:30:30 ----D---- C:\Windows\Temp
2016-03-13 21:29:34 ----D---- C:\Windows
2016-03-13 21:18:17 ----D---- C:\Windows\Microsoft.NET
2016-03-13 21:15:00 ----D---- C:\Windows\system32\sru
2016-03-13 20:21:52 ----D---- C:\Program Files\Common Files
2016-03-13 20:20:51 ----D---- C:\Windows\system32\Tasks
2016-03-13 20:20:51 ----D---- C:\Windows\System32
2016-03-13 20:20:51 ----D---- C:\Windows\INF
2016-03-13 20:20:51 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-13 20:20:49 ----SD---- C:\ProgramData\Microsoft
2016-03-13 20:20:46 ----HD---- C:\ProgramData
2016-03-13 20:20:43 ----RD---- C:\Program Files (x86)
2016-03-13 20:19:31 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\TeamViewer
2016-03-13 20:19:31 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\DAEMON Tools Lite
2016-03-13 20:19:31 ----D---- C:\Program Files (x86)\Steam
2016-03-13 20:19:27 ----D---- C:\Windows\Panther
2016-03-13 20:19:27 ----D---- C:\Windows\Logs
2016-03-13 20:19:27 ----D---- C:\Windows\debug
2016-03-13 20:14:01 ----D---- C:\ProgramData\NVIDIA
2016-03-13 18:40:38 ----SHD---- C:\Windows\Installer
2016-03-13 18:40:37 ----D---- C:\ProgramData\Package Cache
2016-03-13 18:40:35 ----D---- C:\Windows\SysWOW64
2016-03-13 18:15:58 ----RSD---- C:\Windows\assembly
2016-03-13 18:04:11 ----D---- C:\Windows\LiveKernelReports
2016-03-13 12:58:49 ----SHD---- C:\System Volume Information
2016-03-13 12:58:36 ----D---- C:\Windows\system32\config
2016-03-13 12:58:05 ----SD---- C:\Windows\system32\Nui
2016-03-13 12:58:05 ----RSD---- C:\Windows\Media
2016-03-13 12:58:05 ----RD---- C:\Windows\PurchaseDialog
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\wbem
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\migration
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\Dism
2016-03-13 12:58:05 ----D---- C:\Windows\system32\WinBioPlugIns
2016-03-13 12:58:05 ----D---- C:\Windows\system32\wbem
2016-03-13 12:58:05 ----D---- C:\Windows\system32\SystemResetPlatform
2016-03-13 12:58:05 ----D---- C:\Windows\system32\migration
2016-03-13 12:58:05 ----D---- C:\Windows\system32\icsxml
2016-03-13 12:58:05 ----D---- C:\Windows\system32\drivers
2016-03-13 12:58:05 ----D---- C:\Windows\system32\Dism
2016-03-13 12:58:05 ----D---- C:\Windows\system32\Boot
2016-03-13 12:58:05 ----D---- C:\Windows\system32\appraiser
2016-03-13 12:58:05 ----D---- C:\Windows\ShellNew
2016-03-13 12:58:05 ----D---- C:\Windows\PolicyDefinitions
2016-03-13 12:58:05 ----D---- C:\Windows\L2Schemas
2016-03-13 12:58:04 ----RSD---- C:\Windows\Fonts
2016-03-13 12:58:04 ----RD---- C:\Windows\ImmersiveControlPanel
2016-03-13 12:58:04 ----D---- C:\Windows\WinSxS
2016-03-13 12:58:04 ----D---- C:\Windows\bcastdvr
2016-03-13 12:58:04 ----D---- C:\Windows\AppPatch
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Portable Devices
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Media Player
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Journal
2016-03-13 12:58:04 ----D---- C:\Program Files\Internet Explorer
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-13 12:58:01 ----D---- C:\Windows\Tasks
2016-03-13 12:58:01 ----D---- C:\Windows\system32\Sysprep
2016-03-13 12:58:01 ----D---- C:\Windows\system32\Macromed
2016-03-13 12:58:01 ----D---- C:\Windows\system32\CodeIntegrity
2016-03-13 12:58:01 ----D---- C:\Windows\system32\catroot2
2016-03-13 12:58:00 ----D---- C:\Windows\rescache
2016-03-13 12:57:56 ----D---- C:\Windows\Help
2016-03-13 12:57:55 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\vlc
2016-03-13 12:57:55 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\uTorrent
2016-03-13 12:57:55 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\GHISLER
2016-03-13 12:57:48 ----D---- C:\Program Files\NVIDIA Corporation
2016-03-13 12:57:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-13 12:57:47 ----D---- C:\Program Files (x86)\Common Files
2016-03-13 12:57:30 ----HD---- C:\Program Files\WindowsApps
2016-03-13 12:57:19 ----D---- C:\Windows\registration
2016-03-13 12:57:19 ----AD---- C:\xampp
2016-03-13 12:57:05 ----D---- C:\Windows\SYSWOW64\Macromed
2016-03-13 12:56:57 ----D---- C:\Windows\system32\DriverStore
2016-03-13 12:56:57 ----D---- C:\Windows\servicing
2016-03-13 12:56:55 ----D---- C:\Windows\security
2016-03-13 12:56:29 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-13 12:56:17 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-03-13 12:37:44 ----D---- C:\Windows\CbsTemp
2016-03-13 12:13:21 ----D---- C:\Windows\system32\LogFiles
2016-03-12 22:25:59 ----D---- C:\Windows\AppReadiness
2016-03-08 22:31:33 ----D---- C:\Windows\system32\MRT
2016-03-08 22:29:35 ----A---- C:\Windows\system32\MRT.exe
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-03-08 11:27:23 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-03-08 11:27:23 ----A---- C:\Windows\system32\nvapi64.dll
2016-03-08 08:12:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:42:34 ----A---- C:\Windows\system32\nvsvc64.dll
2016-03-08 07:42:34 ----A---- C:\Windows\system32\nvcpl.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvvsvc.exe
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvsvcr.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvshext.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvmctray.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-02-28 21:25:15 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\FileZilla
2016-02-20 08:32:22 ----D---- C:\ProgramData\Skype
2016-02-17 07:40:22 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-02-17 07:40:22 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\nvspcap64.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-03-08 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-03-08 287016]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-03-08 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-03-08 463744]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-03-08 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-03-08 165344]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\System32\drivers\L1C63x64.sys [2015-10-30 121344]
R3 MEIx64;@oem3.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-07-10 193336]
R3 mt7612US;@oem18.inf,%Generic.Service.DispName%;Xbox Wireless Adapter for Windows; C:\Windows\System32\drivers\mt7612US.sys [2015-12-09 377864]
R3 NVHDA;@oem11.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-12-16 205456]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-03-10 12653504]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-17 28032]
R3 nvvad_WaveExtensible;@oem19.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-18 47760]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-11-22 117248]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 dtlitescsibus;@oem13.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-12-26 30264]
S3 dtliteusbbus;@oem14.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\Windows\System32\drivers\dtliteusbbus.sys [2015-12-26 46392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\WNt600x64\Sandra.sys [2009-08-07 23112]
S3 ssudmdm;@oem21.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-03-08 237096]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-17 1164672]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-17 1880960]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-17 2609024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-03-08 1264064]
R2 OneSyncSvc_38d1d;Hostitel synchronizace_38d1d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-03-08 424384]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-17 6474112]
R3 PimIndexMaintenanceSvc_38d1d;Data kontaktů_38d1d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-03-10 835152]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-26 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_211af02;Hostitel synchronizace_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2610b02;Hostitel synchronizace_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_32444;Hostitel synchronizace_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_34f8b;Hostitel synchronizace_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3593b;Hostitel synchronizace_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_35a69;Hostitel synchronizace_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_35da7;Hostitel synchronizace_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_365a9;Hostitel synchronizace_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36683;Hostitel synchronizace_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36735;Hostitel synchronizace_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36a8e;Hostitel synchronizace_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36ad5;Hostitel synchronizace_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37412;Hostitel synchronizace_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_394dd;Hostitel synchronizace_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_397c2;Hostitel synchronizace_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3be340;Hostitel synchronizace_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49155;Hostitel synchronizace_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49c20;Hostitel synchronizace_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d288d6;Hostitel synchronizace_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_83daf7;Hostitel synchronizace_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_adb58f;Hostitel synchronizace_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d00022c;Hostitel synchronizace_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-26 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_211af02;Služba zasílání zpráv_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2610b02;Služba zasílání zpráv_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_32444;Služba zasílání zpráv_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34f8b;Služba zasílání zpráv_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3593b;Služba zasílání zpráv_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_35a69;Služba zasílání zpráv_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_35da7;Služba zasílání zpráv_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_365a9;Služba zasílání zpráv_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36683;Služba zasílání zpráv_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36735;Služba zasílání zpráv_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36a8e;Služba zasílání zpráv_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36ad5;Služba zasílání zpráv_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37412;Služba zasílání zpráv_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_38d1d;Služba zasílání zpráv_38d1d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_394dd;Služba zasílání zpráv_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_397c2;Služba zasílání zpráv_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3be340;Služba zasílání zpráv_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49155;Služba zasílání zpráv_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49c20;Služba zasílání zpráv_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d288d6;Služba zasílání zpráv_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_83daf7;Služba zasílání zpráv_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_adb58f;Služba zasílání zpráv_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d00022c;Služba zasílání zpráv_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-03-09 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_211af02;Data kontaktů_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2610b02;Data kontaktů_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_32444;Data kontaktů_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_34f8b;Data kontaktů_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3593b;Data kontaktů_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_35a69;Data kontaktů_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_35da7;Data kontaktů_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_365a9;Data kontaktů_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36683;Data kontaktů_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36735;Data kontaktů_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36a8e;Data kontaktů_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36ad5;Data kontaktů_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_37412;Data kontaktů_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_394dd;Data kontaktů_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_397c2;Data kontaktů_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3be340;Data kontaktů_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_49155;Data kontaktů_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_49c20;Data kontaktů_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4d288d6;Data kontaktů_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_83daf7;Data kontaktů_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_adb58f;Data kontaktů_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_d00022c;Data kontaktů_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\RpcAgentSrv.exe [2016-02-23 81968]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

#3 Příspěvek od **Rudy** » 13 bře 2016 22:04

Zdravím!
Nejprve na zkoušku vyměňte myšku za jinou, může to dělat i ona.

Cassper · #4 Příspěvek od **Cassper** » 14 bře 2016 06:20

Zkusil jsem stejnou myš v jiném USB portu a nepomohlo.
Zkusil jsem jinou myš a taky nic. Bohužel.

Teď jsem zkontroloval, že celou noc mi běžela Sisoft Sandra jako zátěžový test a bez problému.

Já to nechápu

Cassper · #5 Příspěvek od **Cassper** » 14 bře 2016 06:28

# AdwCleaner v5.102 - Logfile created 14/03/2016 at 06:25:47
# Updated 13/03/2016 by Xplode
# Database : 2016-03-13.2 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : Martin Kašpar - DESKTOP-2FQIKCG
# Running from : C:\Users\Martin Kašpar\Downloads\adwcleaner_5.102.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Martin Kašpar\AppData\Local\Steam\htmlcache

***** [ Files ] *****

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\chatango.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\chatango.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com

Přidávám log z Adwcleaner.

***** [ Web browsers ] *****

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1649 bytes] - [14/03/2016 06:25:47]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [1722 bytes] - [14/03/2016 06:23:33]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S2].txt - [1815 bytes] - [14/03/2016 06:24:50]

########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1928 bytes] ##########

#6 Příspěvek od **Rudy** » 14 bře 2016 18:39

Dejte nový log RSIT.

Cassper · #7 Příspěvek od **Cassper** » 14 bře 2016 21:56

Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin Kašpar at 2016-03-14 21:55:25
Microsoft Windows 10 Pro
System drive C: has 367 GB (77%) free of 476 GB
Total RAM: 8150 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:55:26, on 14.03.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\trend micro\Martin Kašpar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: Install LastPass FF RunOnce.lnk = C:\Program Files (x86)\Common Files\lpuninstall.exe
O4 - Global Startup: Install LastPass IE RunOnce.lnk = C:\Program Files (x86)\Common Files\lpuninstall.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: LastPass - file://C:\Users\Martin Kašpar\AppData\LocalLow\LastPass\context.html?cmd=lastpass
O8 - Extra context menu item: LastPass Vyplňování formulářů - file://C:\Users\Martin Kašpar\AppData\LocalLow\LastPass\context.html?cmd=fillforms
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\RpcAgentSrv.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @oem4.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12153 bytes

======Listing Processes======

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ffcc2878-23e0-4b25-b112-6082e630b10e -SystemEventPortName:HostProcess-3590b7b0-9ce4-4fd9-8083-c4409cf3d9b1 -IoCancelEventPortName:HostProcess-5ad1443d-52fc-460c-8d3e-a193c65b2d8a -NonStateChangingEventPortName:HostProcess-89d61624-54f4-42b5-8f8f-fe353503eac2 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:14a49238-7c91-493d-bac9-fbc3c8257236 -DeviceGroupId:WpdFsGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {331af5ff-57f2-4e60-a83c39837d09a110}
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\viakaraokesrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
sihost.exe
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Martin KaĹˇpar\AppData\Local\Steam\htmlcache" -steampid=6648 -buildid=1457636973 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService

"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
"fontdrvhost.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1904322886-2338088730-148262573-10015_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1904322886-2338088730-148262573-10015 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\Windows\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:7288 CREDAT:140545 EDGEHOST /prefetch:6
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:7288 CREDAT:271633 EDGEHOST /prefetch:6
"C:\Windows\system32\SearchFilterHost.exe" 0 592 596 604 8192 600
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Martin Kašpar\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin Kašpar\AppData\Roaming\Mozilla\Firefox\Profiles\zo3mq5xl.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@lastpass.com/NPLastPass]
"Description"=
"Path"=C:\Program Files (x86)\LastPass\nplastpass64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@lastpass.com/NPLastPass]
"Description"=
"Path"=C:\Program Files (x86)\LastPass\nplastpass64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

C:\Users\Martin Kašpar\AppData\Roaming\Mozilla\Firefox\Profiles\zo3mq5xl.default\extensions\
support@lastpass.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-08 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-12-26 3140120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-08 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-12-26 2283032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-12-26 3140120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-12-26 2283032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-17 2789248]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-02-17 1903344]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26 500936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-11 551104]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-03-10 3074128]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6281.1202"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"=C:\Windows\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Martin Kašpar\AppData\Local\Microsoft\OneDrive\17.3.6301.0127"=C:\Windows\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-09 7137664]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Install LastPass FF RunOnce.lnk - C:\Program Files (x86)\Common Files\lpuninstall.exe
Install LastPass IE RunOnce.lnk - C:\Program Files (x86)\Common Files\lpuninstall.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-14 17:24:35 ----HD---- C:\OneDriveTemp
2016-03-14 06:23:25 ----D---- C:\Program Files (x86)\AdwCleaner
2016-03-13 21:31:08 ----D---- C:\rsit
2016-03-13 21:31:08 ----D---- C:\Program Files\trend micro
2016-03-13 20:21:52 ----D---- C:\Program Files\Common Files\AV
2016-03-13 20:20:47 ----A---- C:\Windows\system32\sdnclean64.exe
2016-03-13 20:20:46 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-03-13 20:20:43 ----AD---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-03-13 20:17:39 ----AD---- C:\Program Files\CCleaner
2016-03-13 18:40:27 ----D---- C:\Program Files\SiSoftware
2016-03-13 11:20:33 ----AD---- C:\Program Files (x86)\CrystalDiskInfo
2016-03-12 19:26:09 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-03-12 19:26:04 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-03-12 19:26:04 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-03-12 19:26:04 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-03-12 19:26:04 ----A---- C:\Windows\system32\vulkan-1.dll
2016-03-12 19:26:02 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-12 19:25:36 ----D---- C:\Windows\LastGood.Tmp
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncMFThevc.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvDecMFTMjpeg.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-03-12 19:24:56 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvopencl.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvoglv64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvmcumd.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvinitx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvIFR64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\NvFBC64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncMFThevc.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvdispgenco6436451.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvdispco6436451.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvDecMFTMjpeg.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcuvid.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcuda.dll
2016-03-12 19:24:56 ----A---- C:\Windows\system32\nvcompiler.dll
2016-03-09 17:53:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-03-08 20:16:25 ----A---- C:\Windows\system32\edgehtml.dll
2016-03-08 20:16:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-03-08 20:16:24 ----A---- C:\Windows\system32\mshtml.dll
2016-03-08 20:16:23 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2016-03-08 20:16:22 ----A---- C:\Windows\system32\WSService.dll
2016-03-08 20:16:22 ----A---- C:\Windows\system32\wmp.dll
2016-03-08 20:16:21 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-08 20:16:20 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-03-08 20:16:20 ----A---- C:\Windows\system32\Chakra.dll
2016-03-08 20:16:19 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2016-03-08 20:16:19 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-03-08 20:16:19 ----A---- C:\Windows\system32\windows.storage.dll
2016-03-08 20:16:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-08 20:16:18 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2016-03-08 20:16:18 ----A---- C:\Windows\system32\wuaueng.dll
2016-03-08 20:16:17 ----A---- C:\Windows\system32\win32kfull.sys
2016-03-08 20:16:17 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-03-08 20:16:17 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2016-03-08 20:16:16 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2016-03-08 20:16:16 ----A---- C:\Windows\system32\dosvc.dll
2016-03-08 20:16:16 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2016-03-08 20:16:15 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2016-03-08 20:16:15 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\WWAHost.exe
2016-03-08 20:16:15 ----A---- C:\Windows\system32\win32kbase.sys
2016-03-08 20:16:15 ----A---- C:\Windows\system32\SRHInproc.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\ole32.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\KernelBase.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\diagtrack.dll
2016-03-08 20:16:15 ----A---- C:\Windows\system32\ContactApis.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\WMPDMC.exe
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\SRHInproc.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\SRH.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2016-03-08 20:16:14 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\Unistore.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\dxgi.dll
2016-03-08 20:16:14 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2016-03-08 20:16:14 ----A---- C:\Windows\system32\AppointmentApis.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\wer.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\AppxPackaging.dll
2016-03-08 20:16:13 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\SRH.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\mfds.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\invagent.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\fontdrvhost.exe
2016-03-08 20:16:13 ----A---- C:\Windows\system32\ClipSVC.dll
2016-03-08 20:16:13 ----A---- C:\Windows\system32\AppxPackaging.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2016-03-08 20:16:12 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\wer.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\msv1_0.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\mfsvr.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\deviceaccess.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\dafBth.dll
2016-03-08 20:16:12 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\PackageStateRoaming.dll
2016-03-08 20:16:11 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\WMPDMC.exe
2016-03-08 20:16:11 ----A---- C:\Windows\system32\MPSSVC.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\EmailApis.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\CallHistoryClient.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\atmfd.dll
2016-03-08 20:16:11 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2016-03-08 20:16:10 ----A---- C:\Windows\SYSWOW64\AppointmentActivation.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\VCardParser.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\ChatApis.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-03-08 20:16:10 ----A---- C:\Windows\system32\AuthBroker.dll
2016-03-08 20:16:10 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2016-03-08 20:16:09 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2016-03-08 20:16:09 ----A---- C:\Windows\SYSWOW64\cemapi.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\sqmapi.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\sharemediacpl.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\PackageStateRoaming.dll
2016-03-08 20:16:09 ----A---- C:\Windows\system32\domgmt.dll
2016-03-08 20:16:08 ----A---- C:\Windows\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-08 20:16:08 ----A---- C:\Windows\SYSWOW64\fwbase.dll
2016-03-08 20:16:08 ----A---- C:\Windows\system32\UserDataAccountApis.dll
2016-03-08 20:16:08 ----A---- C:\Windows\system32\cemapi.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\storewuauth.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\PimIndexMaintenance.dll
2016-03-08 20:16:07 ----A---- C:\Windows\system32\AuthHost.exe
2016-03-08 20:16:07 ----A---- C:\Windows\system32\AppointmentActivation.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\VCardParser.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-03-08 20:16:06 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-03-08 20:16:06 ----A---- C:\Windows\system32\wsqmcons.exe
2016-03-08 20:16:06 ----A---- C:\Windows\system32\wermgr.exe
2016-03-08 20:16:06 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\POSyncServices.dll
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\ExSMime.dll
2016-03-08 20:16:05 ----A---- C:\Windows\SYSWOW64\AppxSip.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\PhoneCallHistoryApis.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\AppxSysprep.dll
2016-03-08 20:16:05 ----A---- C:\Windows\system32\aeinv.dll
2016-03-08 20:16:04 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2016-03-08 20:16:04 ----A---- C:\Windows\SYSWOW64\ExtrasXmlParser.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\wpninprc.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\seclogon.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\PimIndexMaintenanceClient.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\fwbase.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\FirewallAPI.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\ExSMime.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\dssvc.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\devinv.dll
2016-03-08 20:16:04 ----A---- C:\Windows\system32\AppxSip.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\profext.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-08 20:16:03 ----A---- C:\Windows\SYSWOW64\CallHistoryClient.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\Windows.Devices.Scanners.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\wfapigp.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\UserDataLanguageUtil.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\POSyncServices.dll
2016-03-08 20:16:03 ----A---- C:\Windows\system32\ExtrasXmlParser.dll
2016-03-08 20:16:02 ----A---- C:\Windows\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-08 20:16:02 ----A---- C:\Windows\SYSWOW64\UserDataLanguageUtil.dll
2016-03-08 20:16:02 ----A---- C:\Windows\system32\profext.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\wfapigp.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\werui.dll
2016-03-08 20:16:01 ----A---- C:\Windows\SYSWOW64\fwpolicyiomgr.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\werui.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\vaultsvc.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\vaultcli.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\UserDataService.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\scapi.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\Chakradiag.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\fwpolicyiomgr.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\fontsub.dll
2016-03-08 20:16:01 ----A---- C:\Windows\system32\configurationclient.dll
2016-03-08 20:16:00 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-03-08 20:16:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-03-08 20:16:00 ----A---- C:\Windows\system32\atmlib.dll
2016-03-08 15:44:05 ----A---- C:\Windows\system32\aswBoot.exe
2016-03-08 15:44:03 ----A---- C:\Windows\avastSS.scr
2016-03-02 17:36:18 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 17:36:17 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 17:36:15 ----A---- C:\Windows\system32\shell32.dll
2016-03-02 17:36:11 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-03-02 17:36:10 ----A---- C:\Windows\system32\twinui.dll
2016-03-02 17:36:08 ----A---- C:\Windows\system32\ieframe.dll
2016-03-02 17:36:07 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-03-02 17:36:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-03-02 17:36:07 ----A---- C:\Windows\system32\dwmcore.dll
2016-03-02 17:36:06 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2016-03-02 17:36:05 ----A---- C:\Windows\system32\wininet.dll
2016-03-02 17:36:04 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 17:36:04 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\mfcore.dll
2016-03-02 17:36:04 ----A---- C:\Windows\system32\jscript9.dll
2016-03-02 17:36:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\MFMediaEngine.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\d3d11.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\CoreUIComponents.dll
2016-03-02 17:36:03 ----A---- C:\Windows\system32\audiosrv.dll
2016-03-02 17:36:02 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 17:36:02 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\iertutil.dll
2016-03-02 17:36:02 ----A---- C:\Windows\system32\CertEnroll.dll
2016-03-02 17:36:01 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\XblGameSave.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\urlmon.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\schedsvc.dll
2016-03-02 17:36:01 ----A---- C:\Windows\system32\InputService.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-03-02 17:36:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-03-02 17:36:00 ----A---- C:\Windows\system32\XblAuthManager.dll
2016-03-02 17:36:00 ----A---- C:\Windows\system32\mstscax.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-03-02 17:35:59 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\Windows.Media.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\Windows.AccountsControl.dll
2016-03-02 17:35:59 ----A---- C:\Windows\system32\enterprisecsps.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-03-02 17:35:58 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\NetSetupEngine.dll
2016-03-02 17:35:58 ----A---- C:\Windows\system32\modernexecserver.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-03-02 17:35:57 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2016-03-02 17:35:57 ----A---- C:\Windows\system32\ntdll.dll
2016-03-02 17:35:57 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2016-03-02 17:35:56 ----A---- C:\Windows\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 17:35:56 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\wwansvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\SmsRouterSvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\ngcsvc.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-03-02 17:35:56 ----A---- C:\Windows\system32\AudioSes.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\SettingSyncCore.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\NetSetupShim.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\mfsrcsnk.dll
2016-03-02 17:35:55 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2016-03-02 17:35:54 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\Windows.UI.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\QuickActionsDataModel.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2016-03-02 17:35:54 ----A---- C:\Windows\system32\generaltel.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\wcmsvc.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\SharedStartModel.dll
2016-03-02 17:35:53 ----A---- C:\Windows\system32\SettingSync.dll
2016-03-02 17:35:52 ----A---- C:\Windows\SYSWOW64\InputService.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\wlansvc.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\winload.exe
2016-03-02 17:35:52 ----A---- C:\Windows\system32\usbmon.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2016-03-02 17:35:52 ----A---- C:\Windows\system32\DeviceEnroller.exe
2016-03-02 17:35:52 ----A---- C:\Windows\system32\audiodg.exe
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2016-03-02 17:35:51 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2016-03-02 17:35:51 ----A---- C:\Windows\system32\winresume.exe
2016-03-02 17:35:51 ----A---- C:\Windows\system32\localspl.dll
2016-03-02 17:35:51 ----A---- C:\Windows\system32\drivers\sdbus.sys
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2016-03-02 17:35:50 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2016-03-02 17:35:50 ----A---- C:\Windows\system32\MSFlacDecoder.dll
2016-03-02 17:35:50 ----A---- C:\Windows\system32\drivers\bridge.sys
2016-03-02 17:35:49 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2016-03-02 17:35:49 ----A---- C:\Windows\SYSWOW64\NetSetupShim.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\uDWM.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\thumbcache.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\taskschd.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\NetSetupSvc.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\msvproc.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\bisrv.dll
2016-03-02 17:35:49 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-02 17:35:48 ----A---- C:\Windows\SYSWOW64\msvproc.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\StorSvc.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\netlogon.dll
2016-03-02 17:35:48 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2016-03-02 17:35:48 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-03-02 17:35:47 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\wuuhext.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\wifiprofilessettinghandler.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\WiFiDisplay.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\spoolsv.exe
2016-03-02 17:35:47 ----A---- C:\Windows\system32\ipnathlp.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\InstallAgent.exe
2016-03-02 17:35:47 ----A---- C:\Windows\system32\drivers\xinputhid.sys
2016-03-02 17:35:47 ----A---- C:\Windows\system32\DisplayManager.dll
2016-03-02 17:35:47 ----A---- C:\Windows\system32\DeviceCensus.exe
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2016-03-02 17:35:46 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2016-03-02 17:35:46 ----A---- C:\Windows\system32\MDEServer.exe
2016-03-02 17:35:46 ----A---- C:\Windows\system32\MCRecvSrc.dll
2016-03-02 17:35:46 ----A---- C:\Windows\system32\flvprophandler.dll
2016-03-02 17:35:46 ----A---- C:\Windows\system32\drivers\xboxgip.sys
2016-03-02 17:35:46 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-03-02 17:35:45 ----A---- C:\Windows\SYSWOW64\WiFiDisplay.dll
2016-03-02 17:35:45 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\SyncController.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\SMSRouter.dll
2016-03-02 17:35:45 ----A---- C:\Windows\system32\drivers\acpi.sys
2016-03-02 17:35:44 ----A---- C:\Windows\SYSWOW64\SyncController.dll
2016-03-02 17:35:44 ----A---- C:\Windows\SYSWOW64\MSFlacDecoder.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\wlanapi.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2016-03-02 17:35:44 ----A---- C:\Windows\system32\MDMAppInstaller.exe
2016-03-02 17:35:44 ----A---- C:\Windows\system32\drivers\appid.sys
2016-03-02 17:35:43 ----A---- C:\Windows\system32\psmsrv.dll
2016-03-02 17:35:43 ----A---- C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 17:35:42 ----A---- C:\Windows\SYSWOW64\DisplayManager.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\wlansec.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\TextInputFramework.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\ngckeyenum.dll
2016-03-02 17:35:42 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2016-03-02 17:35:42 ----A---- C:\Windows\system32\accountaccessor.dll
2016-03-02 17:35:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\wlansvcpal.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\wlanmsm.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\WiFiConfigSP.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\provpackageapidll.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\MBMediaManager.dll
2016-03-02 17:35:41 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\wininetlui.dll
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 17:35:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\wininetlui.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\wfdprov.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\TimeBrokerClient.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\srpapi.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\irmon.dll
2016-03-02 17:35:40 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\TimeBrokerClient.dll
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2016-03-02 17:35:39 ----A---- C:\Windows\SYSWOW64\InputLocaleManager.dll
2016-03-02 17:35:39 ----A---- C:\Windows\system32\LaunchWinApp.exe
2016-03-02 17:35:39 ----A---- C:\Windows\system32\InputLocaleManager.dll
2016-03-02 17:35:39 ----A---- C:\Windows\system32\bcastdvr.exe
2016-03-02 17:35:39 ----A---- C:\Windows\system32\AppCapture.dll
2016-02-21 21:13:29 ----AD---- C:\Program Files (x86)\Overwolf
2016-02-21 21:13:20 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\TS3Client

======List of files/folders modified in the last 1 month======

2016-03-14 21:55:14 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\Skype
2016-03-14 21:55:06 ----D---- C:\Windows\Temp
2016-03-14 21:54:57 ----HD---- C:\ProgramData
2016-03-14 21:54:33 ----D---- C:\Windows\Prefetch
2016-03-14 21:51:32 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\vlc
2016-03-14 21:10:50 ----D---- C:\Windows\System32
2016-03-14 21:10:50 ----D---- C:\Windows\INF
2016-03-14 21:10:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-14 21:05:07 ----D---- C:\Program Files (x86)\Steam
2016-03-14 21:04:49 ----D---- C:\ProgramData\NVIDIA
2016-03-14 20:28:00 ----D---- C:\Windows\system32\sru
2016-03-14 18:34:45 ----D---- C:\Windows
2016-03-14 17:56:07 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\uTorrent
2016-03-14 17:29:39 ----D---- C:\Windows\debug
2016-03-14 06:23:25 ----RD---- C:\Program Files (x86)
2016-03-13 21:31:08 ----RD---- C:\Program Files
2016-03-13 21:18:17 ----D---- C:\Windows\Microsoft.NET
2016-03-13 20:21:52 ----D---- C:\Program Files\Common Files
2016-03-13 20:20:51 ----D---- C:\Windows\system32\Tasks
2016-03-13 20:20:49 ----SD---- C:\ProgramData\Microsoft
2016-03-13 20:19:31 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\TeamViewer
2016-03-13 20:19:31 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\DAEMON Tools Lite
2016-03-13 20:19:27 ----D---- C:\Windows\Panther
2016-03-13 20:19:27 ----D---- C:\Windows\Minidump
2016-03-13 20:19:27 ----D---- C:\Windows\Logs
2016-03-13 18:40:38 ----SHD---- C:\Windows\Installer
2016-03-13 18:40:37 ----D---- C:\ProgramData\Package Cache
2016-03-13 18:40:35 ----D---- C:\Windows\SysWOW64
2016-03-13 18:15:58 ----RSD---- C:\Windows\assembly
2016-03-13 18:04:11 ----D---- C:\Windows\LiveKernelReports
2016-03-13 12:58:49 ----SHD---- C:\System Volume Information
2016-03-13 12:58:36 ----D---- C:\Windows\system32\config
2016-03-13 12:58:05 ----SD---- C:\Windows\system32\Nui
2016-03-13 12:58:05 ----RSD---- C:\Windows\Media
2016-03-13 12:58:05 ----RD---- C:\Windows\PurchaseDialog
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\wbem
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\migration
2016-03-13 12:58:05 ----D---- C:\Windows\SYSWOW64\Dism
2016-03-13 12:58:05 ----D---- C:\Windows\system32\WinBioPlugIns
2016-03-13 12:58:05 ----D---- C:\Windows\system32\wbem
2016-03-13 12:58:05 ----D---- C:\Windows\system32\SystemResetPlatform
2016-03-13 12:58:05 ----D---- C:\Windows\system32\migration
2016-03-13 12:58:05 ----D---- C:\Windows\system32\icsxml
2016-03-13 12:58:05 ----D---- C:\Windows\system32\drivers
2016-03-13 12:58:05 ----D---- C:\Windows\system32\Dism
2016-03-13 12:58:05 ----D---- C:\Windows\system32\Boot
2016-03-13 12:58:05 ----D---- C:\Windows\system32\appraiser
2016-03-13 12:58:05 ----D---- C:\Windows\ShellNew
2016-03-13 12:58:05 ----D---- C:\Windows\PolicyDefinitions
2016-03-13 12:58:05 ----D---- C:\Windows\L2Schemas
2016-03-13 12:58:04 ----RSD---- C:\Windows\Fonts
2016-03-13 12:58:04 ----RD---- C:\Windows\ImmersiveControlPanel
2016-03-13 12:58:04 ----D---- C:\Windows\WinSxS
2016-03-13 12:58:04 ----D---- C:\Windows\bcastdvr
2016-03-13 12:58:04 ----D---- C:\Windows\AppPatch
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Portable Devices
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Media Player
2016-03-13 12:58:04 ----D---- C:\Program Files\Windows Journal
2016-03-13 12:58:04 ----D---- C:\Program Files\Internet Explorer
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-13 12:58:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-13 12:58:01 ----D---- C:\Windows\Tasks
2016-03-13 12:58:01 ----D---- C:\Windows\system32\Sysprep
2016-03-13 12:58:01 ----D---- C:\Windows\system32\Macromed
2016-03-13 12:58:01 ----D---- C:\Windows\system32\CodeIntegrity
2016-03-13 12:58:01 ----D---- C:\Windows\system32\catroot2
2016-03-13 12:58:00 ----D---- C:\Windows\rescache
2016-03-13 12:57:56 ----D---- C:\Windows\Help
2016-03-13 12:57:55 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\GHISLER
2016-03-13 12:57:48 ----D---- C:\Program Files\NVIDIA Corporation
2016-03-13 12:57:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-13 12:57:47 ----D---- C:\Program Files (x86)\Common Files
2016-03-13 12:57:30 ----HD---- C:\Program Files\WindowsApps
2016-03-13 12:57:19 ----D---- C:\Windows\registration
2016-03-13 12:57:19 ----AD---- C:\xampp
2016-03-13 12:57:05 ----D---- C:\Windows\SYSWOW64\Macromed
2016-03-13 12:56:57 ----D---- C:\Windows\system32\DriverStore
2016-03-13 12:56:57 ----D---- C:\Windows\servicing
2016-03-13 12:56:55 ----D---- C:\Windows\security
2016-03-13 12:56:29 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-13 12:56:17 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-03-13 12:37:44 ----D---- C:\Windows\CbsTemp
2016-03-13 12:13:21 ----D---- C:\Windows\system32\LogFiles
2016-03-12 22:25:59 ----D---- C:\Windows\AppReadiness
2016-03-08 22:31:33 ----D---- C:\Windows\system32\MRT
2016-03-08 22:29:35 ----A---- C:\Windows\system32\MRT.exe
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-03-08 11:27:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-03-08 11:27:23 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-03-08 11:27:23 ----A---- C:\Windows\system32\nvapi64.dll
2016-03-08 08:12:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:42:34 ----A---- C:\Windows\system32\nvsvc64.dll
2016-03-08 07:42:34 ----A---- C:\Windows\system32\nvcpl.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvvsvc.exe
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvsvcr.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvshext.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nvmctray.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-03-08 07:42:32 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-02-28 21:25:15 ----D---- C:\Users\Martin Kašpar\AppData\Roaming\FileZilla
2016-02-20 08:32:22 ----D---- C:\ProgramData\Skype
2016-02-17 07:40:22 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-02-17 07:40:22 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\nvspcap64.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-02-17 07:40:08 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-03-08 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-03-08 287016]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-03-08 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-03-08 463744]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-03-08 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-03-08 165344]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\System32\drivers\L1C63x64.sys [2015-10-30 121344]
R3 MEIx64;@oem3.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-07-10 193336]
R3 mt7612US;@oem18.inf,%Generic.Service.DispName%;Xbox Wireless Adapter for Windows; C:\Windows\System32\drivers\mt7612US.sys [2015-12-09 377864]
R3 NVHDA;@oem11.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-12-16 205456]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-03-10 12653504]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-17 28032]
R3 nvvad_WaveExtensible;@oem19.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-18 47760]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-11-22 117248]
S3 dg_ssudbus;@oem22.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 dtlitescsibus;@oem13.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-12-26 30264]
S3 dtliteusbbus;@oem14.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\Windows\System32\drivers\dtliteusbbus.sys [2015-12-26 46392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\WNt600x64\Sandra.sys [2009-08-07 23112]
S3 ssudmdm;@oem21.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-03-08 237096]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-17 1164672]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-17 1880960]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-17 2609024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-03-08 1264064]
R2 OneSyncSvc_39a27;Hostitel synchronizace_39a27; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-03-08 424384]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-17 6474112]
R3 PimIndexMaintenanceSvc_39a27;Data kontaktů_39a27; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-03-10 835152]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-26 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_126396;Hostitel synchronizace_126396; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_211af02;Hostitel synchronizace_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2610b02;Hostitel synchronizace_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_32444;Hostitel synchronizace_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_34f8b;Hostitel synchronizace_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3593b;Hostitel synchronizace_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_35a69;Hostitel synchronizace_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_35da7;Hostitel synchronizace_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_365a9;Hostitel synchronizace_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36683;Hostitel synchronizace_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36735;Hostitel synchronizace_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36a8e;Hostitel synchronizace_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36ad5;Hostitel synchronizace_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_37412;Hostitel synchronizace_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_394dd;Hostitel synchronizace_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_397c2;Hostitel synchronizace_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3be340;Hostitel synchronizace_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49155;Hostitel synchronizace_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49c20;Hostitel synchronizace_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d288d6;Hostitel synchronizace_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_83daf7;Hostitel synchronizace_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_adb58f;Hostitel synchronizace_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d00022c;Hostitel synchronizace_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-26 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_126396;Služba zasílání zpráv_126396; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_211af02;Služba zasílání zpráv_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2610b02;Služba zasílání zpráv_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_32444;Služba zasílání zpráv_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34f8b;Služba zasílání zpráv_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3593b;Služba zasílání zpráv_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_35a69;Služba zasílání zpráv_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_35da7;Služba zasílání zpráv_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_365a9;Služba zasílání zpráv_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36683;Služba zasílání zpráv_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36735;Služba zasílání zpráv_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36a8e;Služba zasílání zpráv_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36ad5;Služba zasílání zpráv_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_37412;Služba zasílání zpráv_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_394dd;Služba zasílání zpráv_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_397c2;Služba zasílání zpráv_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39a27;Služba zasílání zpráv_39a27; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3be340;Služba zasílání zpráv_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49155;Služba zasílání zpráv_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49c20;Služba zasílání zpráv_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d288d6;Služba zasílání zpráv_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_83daf7;Služba zasílání zpráv_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_adb58f;Služba zasílání zpráv_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d00022c;Služba zasílání zpráv_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-03-09 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_126396;Data kontaktů_126396; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_211af02;Data kontaktů_211af02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2610b02;Data kontaktů_2610b02; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_32444;Data kontaktů_32444; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_34f8b;Data kontaktů_34f8b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3593b;Data kontaktů_3593b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_35a69;Data kontaktů_35a69; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_35da7;Data kontaktů_35da7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_365a9;Data kontaktů_365a9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36683;Data kontaktů_36683; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36735;Data kontaktů_36735; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36a8e;Data kontaktů_36a8e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_36ad5;Data kontaktů_36ad5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_37412;Data kontaktů_37412; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_394dd;Data kontaktů_394dd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_397c2;Data kontaktů_397c2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3be340;Data kontaktů_3be340; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_49155;Data kontaktů_49155; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_49c20;Data kontaktů_49c20; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4d288d6;Data kontaktů_4d288d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_83daf7;Data kontaktů_83daf7; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_adb58f;Data kontaktů_adb58f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_d00022c;Data kontaktů_d00022c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\RpcAgentSrv.exe [2016-02-23 81968]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Cassper · #8 Příspěvek od **Cassper** » 14 bře 2016 21:58

A před hodinou došlo opět k záseku viz můj první příspěvek. Tentokrát při přehrávání filmu.

#9 Příspěvek od **Rudy** » 14 bře 2016 22:17

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Cassper · #10 Příspěvek od **Cassper** » 14 bře 2016 23:43

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 14.03.2016
Čas skenování: 23:38
Protokol: malware.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.03.14.06
Databáze rootkitů: v2016.03.12.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Martin Kašpar

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 344637
Uplynulý čas: 4 min, 6 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
PUP.Optional.InstallCore, C:\Users\Martin Kašpar\Downloads\FileZilla_3.exe, , [e5c92661ecad20164a73cc8f04fde31d],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

#11 Příspěvek od **Rudy** » 15 bře 2016 17:56

Nalezenou položku smažte.

Cassper · #12 Příspěvek od **Cassper** » 15 bře 2016 17:59

Hotovo.
A dále ?

#13 Příspěvek od **Rudy** » 15 bře 2016 18:37

Změnilo se něco?

Cassper · #14 Příspěvek od **Cassper** » 15 bře 2016 18:49

No zatím se nic nekouslo. Ale ono i předtím počítač třeba 2 hodiny v klidu běžel. ... A pak se najednou kousnul 2x za sebou v rozmezí pár minut.

A jen ještě otázka. Čemu vadí Filezilla ? Vždyť to není žádný warez, ale legální FTP klient.

Cassper · #15 Příspěvek od **Cassper** » 15 bře 2016 19:26

Tak bohužel, došlo znova ke kousnutí.

Malwarebytes Antimalware scan ale už nic neukazuje.

VIRY.CZ

V čem by mohl být problém ?

V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?

Re: V čem by mohl být problém ?