Stránka 1 z 1

Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 20:20
od Ervd
Dobrý den,

vlastní hloupostí jsem si pravděpodobně zaviroval PC. Nainstalovali se mi do PC nějaké čínský programy, které jsem již smazal, ale PC běží bídně.

Velice děkuji za pomoc!

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mýl_a_Páť at 2016-03-20 20:17:19
Microsoft Windows 10 Home
System drive C: has 569 GB (60%) free of 953 GB
Total RAM: 8063 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:17:19, on 20.3.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
C:\Program Files\trend micro\Mýl_a_Páť.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=95144889_hao_pg
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=95144889_hao_pg
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe" -NoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Kaspersky Endpoint Security Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
O23 - Service: Kaspersky Seamless Update Service (avpsus) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe
O23 - Service: Brother Resource manager service (brmfrsmg) - Unknown owner - C:\WINDOWS\system32\BrmfRsmg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10721 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"dwm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1a407a36-c22d-4e7e-afe6-77e9cec072f9 -SystemEventPortName:HostProcess-d2bc675b-2dd8-4ca5-8edc-68697424f563 -IoCancelEventPortName:HostProcess-9c899d2e-560f-4105-89ba-23e2e4c8bc1c -NonStateChangingEventPortName:HostProcess-89e71750-4eb6-44da-8c83-266c217cc19d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b1b4b134-9220-402a-afa8-d6fd33f16cee -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\system32\BrmfRsmg.exe -service
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\system32\mqsvc.exe
dashost.exe {2b486dc9-97f3-4915-ba089dd19a948a4f}
taskeng.exe {8257093A-1DEE-4EE2-99B5-535B5C3693BD}
sihost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\BrmfRsmg.exe -process -overmain -load -open
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe" -r
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.113_none_7689896a26389b16\TiWorker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SysWOW64\muachost.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\x64\wmi64.exe" "WAIT_REQUEST" "\\.\pipe\{03D13419-7CFC-497F-B8DF-6169C184D3DC}"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
igfxEM.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /cr
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup

C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Mýl_a_Páť\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_182_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-03-12 462432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-03-12 173152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-02-17 1903344]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-17 2789248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-03-25 31682144]
"OneDrive"=C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-10 551112]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2015-05-13 419864]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Live Update]
C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2015-05-13 55320]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-03-12 25577864]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 595504]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-20 20:16:14 ----D---- C:\rsit
2016-03-20 17:15:33 ----A---- C:\WINDOWS\SYSWOW64\drivers\TS888x64.sys
2016-03-20 17:02:48 ----A---- C:\Users\Mýl_a_Páť\AppData\Roaming\GiftBag.db
2016-03-20 17:02:37 ----D---- C:\Program Files\Common Files\Tencent
2016-03-20 17:02:32 ----D---- C:\ProgramData\TXQMPC
2016-03-20 17:02:32 ----A---- C:\WINDOWS\system32\drivers\TAOKernelEx64.sys
2016-03-20 17:02:02 ----A---- C:\WINDOWS\system32\drivers\TFsFltX64.sys
2016-03-20 17:01:56 ----D---- C:\ProgramData\Application Data
2016-03-20 17:01:55 ----D---- C:\Program Files (x86)\Tencent
2016-03-20 17:01:52 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\Tencent
2016-03-20 17:01:51 ----D---- C:\ProgramData\Tencent
2016-03-20 09:55:56 ----D---- C:\ProgramData\Kaspersky Lab
2016-03-20 09:55:53 ----D---- C:\Program Files (x86)\Kaspersky Lab
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klif.sys
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klflt.sys
2016-03-20 09:32:03 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2016-03-12 20:52:30 ----AD---- C:\Program Files (x86)\LibreOffice 5
2016-03-10 20:32:23 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-03-10 20:32:16 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-10 20:30:31 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-03-10 20:30:31 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispgenco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-03-09 11:02:49 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-09 11:02:40 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispgenco6436447.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispco6436447.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-02 18:16:37 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 18:16:33 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 18:16:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 18:16:21 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 18:16:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 18:16:17 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 18:16:13 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 18:16:12 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 18:15:57 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 18:15:45 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\AppCapture.dll

======List of files/folders modified in the last 1 month======

2016-03-20 20:17:19 ----D---- C:\WINDOWS\Temp
2016-03-20 20:17:19 ----D---- C:\Program Files\trend micro
2016-03-20 20:15:16 ----D---- C:\WINDOWS\Prefetch
2016-03-20 20:14:57 ----D---- C:\WINDOWS\System32
2016-03-20 20:14:57 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-20 20:14:29 ----D---- C:\WINDOWS\system32\sru
2016-03-20 20:13:59 ----D---- C:\ProgramData\NVIDIA
2016-03-20 20:03:57 ----D---- C:\WINDOWS\INF
2016-03-20 17:52:32 ----D---- C:\Windows
2016-03-20 17:33:04 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-20 17:30:22 ----D---- C:\WINDOWS\debug
2016-03-20 17:30:02 ----D---- C:\Program Files (x86)\Common Files
2016-03-20 17:26:33 ----D---- C:\WINDOWS\system32\drivers
2016-03-20 17:15:33 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-03-20 17:12:05 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\Seznam.cz
2016-03-20 17:08:37 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\vlc
2016-03-20 17:02:37 ----D---- C:\Program Files\Common Files
2016-03-20 17:02:32 ----HD---- C:\ProgramData
2016-03-20 17:02:31 ----RD---- C:\Users
2016-03-20 17:02:05 ----RSD---- C:\WINDOWS\Fonts
2016-03-20 17:01:55 ----RD---- C:\Program Files (x86)
2016-03-20 13:42:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-20 10:00:00 ----SHD---- C:\System Volume Information
2016-03-20 09:58:07 ----SHDC---- C:\WINDOWS\Installer
2016-03-20 09:57:50 ----SHD---- C:\Config.Msi
2016-03-20 09:56:58 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-20 09:55:59 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-20 09:37:41 ----D---- C:\ProgramData\AVAST Software
2016-03-20 09:37:40 ----RD---- C:\Program Files
2016-03-20 09:32:26 ----D---- C:\WINDOWS\system32\Tasks
2016-03-20 09:32:03 ----D---- C:\WINDOWS\SysWOW64
2016-03-20 09:19:05 ----D---- C:\WINDOWS\system32\config
2016-03-20 09:17:51 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-19 23:10:47 ----D---- C:\Program Files (x86)\Dropbox
2016-03-19 20:24:05 ----D---- C:\WINDOWS\AppReadiness
2016-03-18 18:27:08 ----HD---- C:\Program Files\WindowsApps
2016-03-18 18:26:43 ----AD---- C:\Program Files (x86)\Opera
2016-03-12 20:53:10 ----RD---- C:\WINDOWS\assembly
2016-03-12 20:52:17 ----AD---- C:\Program Files (x86)\LibreOffice 4
2016-03-12 20:40:26 ----D---- C:\Program Files\7-Zip
2016-03-12 20:33:17 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-03-12 20:33:09 ----D---- C:\Program Files (x86)\Java
2016-03-11 19:13:32 ----D---- C:\WINDOWS\WinSxS
2016-03-11 19:06:06 ----D---- C:\WINDOWS\CbsTemp
2016-03-10 20:32:43 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-09 22:01:11 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-09 22:00:26 ----D---- C:\WINDOWS\system32\migration
2016-03-09 22:00:22 ----D---- C:\WINDOWS\AppPatch
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Media Player
2016-03-09 22:00:22 ----D---- C:\Program Files\Internet Explorer
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 11:05:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 11:04:08 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-09 10:53:14 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-03-05 12:45:14 ----D---- C:\WINDOWS\rescache
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-03 03:30:47 ----RSD---- C:\WINDOWS\Media
2016-03-03 03:30:47 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\wbem
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Dism
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Boot
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\appraiser
2016-03-03 03:30:47 ----D---- C:\WINDOWS\bcastdvr
2016-03-03 03:30:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\WINDOWS\system32\DRIVERS\kl1.sys [2015-09-11 478392]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2015-10-05 39096]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2015-09-30 678784]
R1 KLIM6;@oem31.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter; C:\WINDOWS\system32\DRIVERS\klim6.sys [2015-08-17 42152]
R1 klwfp;klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [2015-10-01 78008]
R1 kneps;kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [2015-09-11 188584]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-19 7858088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem18.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-10-28 474376]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-15 175616]
R3 NVHDA;@oem6.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-11-25 205456]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-03-10 12653504]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-17 28032]
R3 nvvad_WaveExtensible;@oem16.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 klelam;klelam; C:\WINDOWS\system32\DRIVERS\klelam.sys [2015-08-30 31848]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S1 QMUdisk;tencent QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QMUdisk64.sys []
S1 softaal;softaal; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\softaal64.sys []
S1 SRepairDrv;SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\Plugins\SRepairDrv [2016-03-20 168568]
S2 tsnethlpx64;TsNetHlpX64.sys; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\TsNetHlpX64.sys []
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BrUsbScn;@oem7.inf,%BrUsbScn.SvcDesc%;Brother MFC USB Scanner driver; C:\WINDOWS\System32\Drivers\BrUsbScn.sys [2015-09-09 14336]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-15 117248]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-11-22 25640]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NTIOLib_MB;NTIOLib_MB; \??\C:\Program Files (x86)\MSI\MSI Gaming APP\Lib\NTIOLib_X64.sys [2014-03-13 13808]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 AVP;Kaspersky Endpoint Security Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]
R2 avpsus;Kaspersky Seamless Update Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe [2015-11-10 2481072]
R2 brmfrsmg;Brother Resource manager service; C:\WINDOWS\system32\BrmfRsmg.exe [2015-09-09 52736]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-09-03 34984]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-17 1164672]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-19 373160]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-09-11 1768912]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-15 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-17 1880960]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-17 2609024]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-03-08 1264064]
R2 OneSyncSvc_30412;Hostitel synchronizace_30412; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-03-08 424384]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-17 6474112]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_392c9ec4;Hostitel synchronizace_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-19 300968]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-01-02 171632]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30412;Služba zasílání zpráv_30412; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_392c9ec4;Služba zasílání zpráv_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-09-25 2057736]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_30412;Data kontaktů_30412; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_392c9ec4;Data kontaktů_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 20:29
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 20:37
od Ervd
# AdwCleaner v5.102 - Logfile created 20/03/2016 at 20:34:58
# Updated 13/03/2016 by Xplode
# Database : 2016-03-20.7 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Mýl_a_Páť - MÝL_A_PÁŤ-PC
# Running from : C:\Users\Mýl_a_Páť\Desktop\adwcleaner_5.102.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : QMUdisk
[-] Service Deleted : softaal
[-] Service Deleted : SRepairDrv

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\tencent
[-] Folder Deleted : C:\Program Files\Common Files\tencent
[-] Folder Deleted : C:\ProgramData\tencent
[-] Folder Deleted : C:\ProgramData\TXQMPC
[-] Folder Deleted : C:\Users\ML_A_P~1\AppData\Local\Temp\tencent
[-] Folder Deleted : C:\Users\Mýl_a_Páť\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\Mýl_a_Páť\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Folder Deleted : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\tencent

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysNative\drivers\TFsFltX64.sys
[-] File Deleted : C:\WINDOWS\SysWOW64\drivers\TS888x64.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54
[-] Key Deleted : HKLM\SOFTWARE\microsoft\windows nt\currentversion\Image File Execution Options\MsMpEng.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-3706085598-1878046974-4067092362-1000\Software\Microsoft\Internet Explorer\Main [Start Page]

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [2681 bytes] - [20/03/2016 20:34:58]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [2836 bytes] - [20/03/2016 20:33:10]

########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [2867 bytes] ##########

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 20:43
od Rudy
Dejte nový log RSIT.

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 20:49
od Ervd
Logfile of random's system information tool 1.10 (written by random/random)
Run by Mýl_a_Páť at 2016-03-20 20:49:15
Microsoft Windows 10 Home
System drive C: has 569 GB (60%) free of 953 GB
Total RAM: 8063 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:49:16, on 20.3.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera_crashreporter.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Reader_sl.exe
C:\Program Files\trend micro\Mýl_a_Páť.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe" -NoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Kaspersky Endpoint Security Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
O23 - Service: Kaspersky Seamless Update Service (avpsus) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe
O23 - Service: Brother Resource manager service (brmfrsmg) - Unknown owner - C:\WINDOWS\system32\BrmfRsmg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11214 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b6ae0def-c8da-4a21-bfdd-7f60f5dbbb82 -SystemEventPortName:HostProcess-69fe7a2d-1f48-47e6-9400-fa332b37cc85 -IoCancelEventPortName:HostProcess-13e436c6-eaf7-4b6d-b7b1-f74bb125cd75 -NonStateChangingEventPortName:HostProcess-eecef5aa-388e-4d4b-8900-e1462b2b4d9d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7c028074-ca13-48de-81c3-3bcffc58c556 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\BrmfRsmg.exe -service
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
taskeng.exe {E877A024-D2EE-49E7-ACE4-80738CD15F90}
sihost.exe
C:\WINDOWS\system32\mqsvc.exe
dashost.exe {c4821628-c1f2-4016-bf451cdc5b426cb6}
C:\WINDOWS\system32\BrmfRsmg.exe -process -overmain -load -open
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe" -r
igfxEM.exe
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\36.0.2130.32\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=7632
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=gpu-process --channel="7632.0.726537134\1762087467" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --supports-dual-gpus=false --gpu-driver-bug-workarounds=3,14,31,60,70 --gpu-vendor-id=0x10de --gpu-device-id=0x1184 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.6451 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --ignored=" --type=renderer "
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.2.2095795171\816691412"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.3.836536182\1437634252"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.4.1000098192\1469609532"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.5.218215628\1995562015"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.6.1436799151\378811482"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.7.783333286\522419205"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7756 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7632.8.1688905273\836133179"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.46331.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 628 632 640 8192 636
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Reader_sl.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Mýl_a_Páť\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_182_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-03-12 462432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-03-12 173152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-02-17 1903344]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-17 2789248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-03-25 31682144]
"OneDrive"=C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-10 551112]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2015-05-13 419864]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Live Update]
C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2015-05-13 55320]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-03-12 25577864]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 595504]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-20 20:33:00 ----D---- C:\Program Files (x86)\AdwCleaner
2016-03-20 20:16:14 ----D---- C:\rsit
2016-03-20 17:02:48 ----A---- C:\Users\Mýl_a_Páť\AppData\Roaming\GiftBag.db
2016-03-20 17:02:32 ----A---- C:\WINDOWS\system32\drivers\TAOKernelEx64.sys
2016-03-20 17:01:56 ----D---- C:\ProgramData\Application Data
2016-03-20 09:55:56 ----D---- C:\ProgramData\Kaspersky Lab
2016-03-20 09:55:53 ----D---- C:\Program Files (x86)\Kaspersky Lab
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klif.sys
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klflt.sys
2016-03-20 09:32:03 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2016-03-12 20:52:30 ----AD---- C:\Program Files (x86)\LibreOffice 5
2016-03-10 20:32:23 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-03-10 20:32:16 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-10 20:30:31 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-03-10 20:30:31 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispgenco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-03-09 11:02:49 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-09 11:02:40 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispgenco6436447.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispco6436447.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-02 18:16:37 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 18:16:33 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 18:16:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 18:16:21 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 18:16:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 18:16:17 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 18:16:13 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 18:16:12 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 18:15:57 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 18:15:45 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\AppCapture.dll

======List of files/folders modified in the last 1 month======

2016-03-20 20:49:16 ----D---- C:\Program Files\trend micro
2016-03-20 20:49:15 ----D---- C:\WINDOWS\Temp
2016-03-20 20:49:13 ----D---- C:\WINDOWS\Prefetch
2016-03-20 20:36:11 ----D---- C:\WINDOWS\system32\sru
2016-03-20 20:36:07 ----D---- C:\WINDOWS\System32
2016-03-20 20:36:07 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-20 20:35:49 ----D---- C:\ProgramData\NVIDIA
2016-03-20 20:34:59 ----HD---- C:\ProgramData
2016-03-20 20:34:59 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-03-20 20:34:59 ----D---- C:\WINDOWS\system32\drivers
2016-03-20 20:34:59 ----D---- C:\Program Files\Common Files
2016-03-20 20:34:58 ----RD---- C:\Program Files (x86)
2016-03-20 20:03:57 ----D---- C:\WINDOWS\INF
2016-03-20 17:52:32 ----D---- C:\Windows
2016-03-20 17:33:04 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-20 17:30:22 ----D---- C:\WINDOWS\debug
2016-03-20 17:30:02 ----D---- C:\Program Files (x86)\Common Files
2016-03-20 17:12:05 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\Seznam.cz
2016-03-20 17:08:37 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\vlc
2016-03-20 17:02:31 ----RD---- C:\Users
2016-03-20 17:02:05 ----RSD---- C:\WINDOWS\Fonts
2016-03-20 13:42:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-20 10:00:00 ----SHD---- C:\System Volume Information
2016-03-20 09:58:07 ----SHDC---- C:\WINDOWS\Installer
2016-03-20 09:57:50 ----SHD---- C:\Config.Msi
2016-03-20 09:56:58 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-20 09:55:59 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-20 09:37:41 ----D---- C:\ProgramData\AVAST Software
2016-03-20 09:37:40 ----RD---- C:\Program Files
2016-03-20 09:32:26 ----D---- C:\WINDOWS\system32\Tasks
2016-03-20 09:32:03 ----D---- C:\WINDOWS\SysWOW64
2016-03-20 09:19:05 ----D---- C:\WINDOWS\system32\config
2016-03-20 09:17:51 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-19 23:10:47 ----D---- C:\Program Files (x86)\Dropbox
2016-03-19 20:24:05 ----D---- C:\WINDOWS\AppReadiness
2016-03-18 18:27:08 ----HD---- C:\Program Files\WindowsApps
2016-03-18 18:26:43 ----AD---- C:\Program Files (x86)\Opera
2016-03-12 20:53:10 ----RD---- C:\WINDOWS\assembly
2016-03-12 20:52:17 ----AD---- C:\Program Files (x86)\LibreOffice 4
2016-03-12 20:40:26 ----D---- C:\Program Files\7-Zip
2016-03-12 20:33:17 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-03-12 20:33:09 ----D---- C:\Program Files (x86)\Java
2016-03-11 19:13:32 ----D---- C:\WINDOWS\WinSxS
2016-03-11 19:06:06 ----D---- C:\WINDOWS\CbsTemp
2016-03-10 20:32:43 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-09 22:01:11 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-09 22:00:26 ----D---- C:\WINDOWS\system32\migration
2016-03-09 22:00:22 ----D---- C:\WINDOWS\AppPatch
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Media Player
2016-03-09 22:00:22 ----D---- C:\Program Files\Internet Explorer
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 11:05:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 11:04:08 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-09 10:53:14 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-03-05 12:45:14 ----D---- C:\WINDOWS\rescache
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-03 03:30:47 ----RSD---- C:\WINDOWS\Media
2016-03-03 03:30:47 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\wbem
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Dism
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Boot
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\appraiser
2016-03-03 03:30:47 ----D---- C:\WINDOWS\bcastdvr
2016-03-03 03:30:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\WINDOWS\system32\DRIVERS\kl1.sys [2015-09-11 478392]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2015-10-05 39096]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2015-09-30 678784]
R1 KLIM6;@oem31.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter; C:\WINDOWS\system32\DRIVERS\klim6.sys [2015-08-17 42152]
R1 klwfp;klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [2015-10-01 78008]
R1 kneps;kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [2015-09-11 188584]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-19 7858088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem18.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-10-28 474376]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-15 175616]
R3 NVHDA;@oem6.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-11-25 205456]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-03-10 12653504]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-17 28032]
R3 nvvad_WaveExtensible;@oem16.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 klelam;klelam; C:\WINDOWS\system32\DRIVERS\klelam.sys [2015-08-30 31848]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S2 tsnethlpx64;TsNetHlpX64.sys; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\TsNetHlpX64.sys []
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BrUsbScn;@oem7.inf,%BrUsbScn.SvcDesc%;Brother MFC USB Scanner driver; C:\WINDOWS\System32\Drivers\BrUsbScn.sys [2015-09-09 14336]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-15 117248]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-11-22 25640]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NTIOLib_MB;NTIOLib_MB; \??\C:\Program Files (x86)\MSI\MSI Gaming APP\Lib\NTIOLib_X64.sys [2014-03-13 13808]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 AVP;Kaspersky Endpoint Security Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]
R2 avpsus;Kaspersky Seamless Update Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe [2015-11-10 2481072]
R2 brmfrsmg;Brother Resource manager service; C:\WINDOWS\system32\BrmfRsmg.exe [2015-09-09 52736]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-09-03 34984]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-17 1164672]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-19 373160]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-09-11 1768912]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-15 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-17 1880960]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-17 2609024]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-03-08 1264064]
R2 OneSyncSvc_2b045;Hostitel synchronizace_2b045; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-03-08 424384]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-17 6474112]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_392c9ec4;Hostitel synchronizace_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-19 300968]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-01-02 171632]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2b045;Služba zasílání zpráv_2b045; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_392c9ec4;Služba zasílání zpráv_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-09-25 2057736]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2b045;Data kontaktů_2b045; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_392c9ec4;Data kontaktů_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 21:01
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 21:16
od Ervd
Logfile of random's system information tool 1.10 (written by random/random)
Run by Mýl_a_Páť at 2016-03-20 21:16:21
Microsoft Windows 10 Home
System drive C: has 569 GB (60%) free of 953 GB
Total RAM: 8063 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:16:23, on 20.3.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera_crashreporter.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe
C:\Program Files\trend micro\Mýl_a_Páť.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe" -NoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Kaspersky Endpoint Security Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
O23 - Service: Kaspersky Seamless Update Service (avpsus) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe
O23 - Service: Brother Resource manager service (brmfrsmg) - Unknown owner - C:\WINDOWS\system32\BrmfRsmg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10942 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-131589a8-f14d-42d5-b052-74e311302cdd -SystemEventPortName:HostProcess-2f63a564-c2ee-4f31-934e-b00905b6ce64 -IoCancelEventPortName:HostProcess-bd0ecbc8-656c-472e-923b-b989a1543102 -NonStateChangingEventPortName:HostProcess-8118b76e-0bbe-4f9a-9716-7e1f24dca951 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:fad4a49a-b67a-4527-8d16-4984e7dc93ef -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\system32\BrmfRsmg.exe -service
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe" -r
C:\WINDOWS\system32\BrmfRsmg.exe -process -overmain -load -open
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {9238db67-d766-484c-83ab8f321d105abb}
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
sihost.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\WmiApSrv.exe
taskeng.exe {0F7003F8-9D2C-4C39-A259-A96E45B72054}
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\WINDOWS\notepad.exe" C:\_OTM\MovedFiles\03202016_211328.log
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
igfxEM.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"

"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --ran-launcher
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\x64\wmi64.exe" "WAIT_REQUEST" "\\.\pipe\{9A0BA4E9-D0D3-4D98-B803-C1FF52A46FE5}"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=7428
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=gpu-process --channel="7428.0.300897450\1813465627" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --supports-dual-gpus=false --gpu-driver-bug-workarounds=3,14,31,60,70 --gpu-vendor-id=0x10de --gpu-device-id=0x1184 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.6451 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --ignored=" --type=renderer "
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.2.2056748443\1802847781"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.3.1461342044\1170347284"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.4.584113296\186472960"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.5.274112422\1436999983"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.6.1702299362\1969313435"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.7.331604955\430901942"
"C:\Program Files (x86)\Opera\36.0.2130.32\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=7852 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7428.8.1639279541\1875564223"
"C:\Users\Mýl_a_Páť\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_182_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-03-12 462432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-03-12 173152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-02-17 1903344]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-02-17 2789248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-03-25 31682144]
"OneDrive"=C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-10 551112]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2015-05-13 419864]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Live Update]
C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2015-09-11 11328464]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2015-05-13 55320]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-03-12 25577864]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-20 21:13:28 ----D---- C:\_OTM
2016-03-20 20:33:00 ----D---- C:\Program Files (x86)\AdwCleaner
2016-03-20 20:16:14 ----D---- C:\rsit
2016-03-20 17:02:48 ----A---- C:\Users\Mýl_a_Páť\AppData\Roaming\GiftBag.db
2016-03-20 17:02:32 ----A---- C:\WINDOWS\system32\drivers\TAOKernelEx64.sys
2016-03-20 17:01:56 ----D---- C:\ProgramData\Application Data
2016-03-20 09:55:56 ----D---- C:\ProgramData\Kaspersky Lab
2016-03-20 09:55:53 ----D---- C:\Program Files (x86)\Kaspersky Lab
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klif.sys
2016-03-20 09:55:43 ----A---- C:\WINDOWS\system32\drivers\klflt.sys
2016-03-20 09:32:03 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2016-03-12 20:52:30 ----AD---- C:\Program Files (x86)\LibreOffice 5
2016-03-10 20:32:23 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-03-10 20:32:17 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-03-10 20:32:16 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-10 20:30:31 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-03-10 20:30:31 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-03-10 20:30:30 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-03-10 20:30:29 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-03-10 20:30:28 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-10 20:30:27 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispgenco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvdispco6436451.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-03-10 20:30:26 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-03-10 20:30:25 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-03-10 20:30:20 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-03-09 11:02:49 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-09 11:02:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-09 11:02:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-09 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-09 11:02:44 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-09 11:02:42 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-09 11:02:41 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-09 11:02:40 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-09 11:02:39 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-09 11:02:38 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-09 11:02:37 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-09 11:02:36 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-09 11:02:35 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-09 11:02:34 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:33 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-09 11:02:32 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-09 11:02:31 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-09 11:02:30 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-09 11:02:29 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-09 11:02:28 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-09 11:02:27 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-09 11:02:26 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-09 11:02:25 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-09 11:02:24 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-09 11:02:23 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-09 11:02:22 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-09 11:02:21 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-09 11:02:20 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-09 11:02:19 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-09 11:02:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-09 11:02:17 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-09 11:02:16 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispgenco6436447.dll
2016-03-07 20:17:04 ----A---- C:\WINDOWS\system32\nvdispco6436447.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-05 21:45:59 ----A---- C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-02 18:16:37 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 18:16:34 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 18:16:33 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 18:16:32 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 18:16:29 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 18:16:28 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 18:16:27 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 18:16:26 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 18:16:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 18:16:21 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 18:16:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 18:16:17 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 18:16:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 18:16:15 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 18:16:14 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 18:16:13 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 18:16:12 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 18:16:11 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 18:16:10 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 18:16:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 18:16:08 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 18:16:07 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 18:16:06 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 18:16:05 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 18:16:04 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 18:16:02 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 18:16:01 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 18:16:00 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 18:15:59 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 18:15:58 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 18:15:57 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 18:15:57 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 18:15:56 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 18:15:55 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 18:15:54 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 18:15:53 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 18:15:52 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 18:15:51 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 18:15:50 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 18:15:49 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 18:15:48 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 18:15:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 18:15:46 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 18:15:45 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 18:15:44 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 18:15:43 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 18:15:42 ----A---- C:\WINDOWS\system32\AppCapture.dll

======List of files/folders modified in the last 1 month======

2016-03-20 21:16:23 ----D---- C:\Program Files\trend micro
2016-03-20 21:16:21 ----D---- C:\WINDOWS\Temp
2016-03-20 21:16:01 ----D---- C:\WINDOWS\Prefetch
2016-03-20 21:15:19 ----D---- C:\WINDOWS\System32
2016-03-20 21:15:19 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-20 21:14:48 ----D---- C:\WINDOWS\system32\sru
2016-03-20 21:14:32 ----D---- C:\ProgramData\NVIDIA
2016-03-20 21:13:43 ----D---- C:\Windows
2016-03-20 21:13:37 ----D---- C:\WINDOWS\Tasks
2016-03-20 20:59:34 ----D---- C:\WINDOWS\debug
2016-03-20 20:34:59 ----HD---- C:\ProgramData
2016-03-20 20:34:59 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-03-20 20:34:59 ----D---- C:\WINDOWS\system32\drivers
2016-03-20 20:34:59 ----D---- C:\Program Files\Common Files
2016-03-20 20:34:58 ----RD---- C:\Program Files (x86)
2016-03-20 20:03:57 ----D---- C:\WINDOWS\INF
2016-03-20 17:33:04 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-20 17:30:02 ----D---- C:\Program Files (x86)\Common Files
2016-03-20 17:12:05 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\Seznam.cz
2016-03-20 17:08:37 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\vlc
2016-03-20 17:02:31 ----RD---- C:\Users
2016-03-20 17:02:05 ----RSD---- C:\WINDOWS\Fonts
2016-03-20 13:42:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-20 10:00:00 ----SHD---- C:\System Volume Information
2016-03-20 09:58:07 ----SHDC---- C:\WINDOWS\Installer
2016-03-20 09:57:50 ----SHD---- C:\Config.Msi
2016-03-20 09:56:58 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-20 09:55:59 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-20 09:37:41 ----D---- C:\ProgramData\AVAST Software
2016-03-20 09:37:40 ----RD---- C:\Program Files
2016-03-20 09:32:26 ----D---- C:\WINDOWS\system32\Tasks
2016-03-20 09:32:03 ----D---- C:\WINDOWS\SysWOW64
2016-03-20 09:19:05 ----D---- C:\WINDOWS\system32\config
2016-03-20 09:17:51 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-19 23:10:47 ----D---- C:\Program Files (x86)\Dropbox
2016-03-19 20:24:05 ----D---- C:\WINDOWS\AppReadiness
2016-03-18 18:27:08 ----HD---- C:\Program Files\WindowsApps
2016-03-18 18:26:43 ----AD---- C:\Program Files (x86)\Opera
2016-03-12 20:53:10 ----RD---- C:\WINDOWS\assembly
2016-03-12 20:52:17 ----AD---- C:\Program Files (x86)\LibreOffice 4
2016-03-12 20:40:26 ----D---- C:\Program Files\7-Zip
2016-03-12 20:33:17 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-03-12 20:33:09 ----D---- C:\Program Files (x86)\Java
2016-03-11 19:13:32 ----D---- C:\WINDOWS\WinSxS
2016-03-11 19:06:06 ----D---- C:\WINDOWS\CbsTemp
2016-03-10 20:32:43 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-09 22:01:11 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-09 22:00:26 ----D---- C:\WINDOWS\system32\migration
2016-03-09 22:00:22 ----D---- C:\WINDOWS\AppPatch
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files\Windows Media Player
2016-03-09 22:00:22 ----D---- C:\Program Files\Internet Explorer
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-09 22:00:22 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 11:05:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 11:04:08 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-09 10:53:14 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-03-08 11:27:23 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-03-08 07:42:34 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-03-08 07:42:32 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-03-05 12:45:14 ----D---- C:\WINDOWS\rescache
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-03 03:30:50 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-03 03:30:47 ----RSD---- C:\WINDOWS\Media
2016-03-03 03:30:47 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\wbem
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Dism
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\Boot
2016-03-03 03:30:47 ----D---- C:\WINDOWS\system32\appraiser
2016-03-03 03:30:47 ----D---- C:\WINDOWS\bcastdvr
2016-03-03 03:30:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\WINDOWS\system32\DRIVERS\kl1.sys [2015-09-11 478392]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2015-10-05 39096]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2015-09-30 678784]
R1 KLIM6;@oem31.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter; C:\WINDOWS\system32\DRIVERS\klim6.sys [2015-08-17 42152]
R1 klwfp;klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [2015-10-01 78008]
R1 kneps;kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [2015-09-11 188584]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-19 7858088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem18.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-10-28 474376]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-15 175616]
R3 NVHDA;@oem6.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-11-25 205456]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-03-10 12653504]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-02-17 28032]
R3 nvvad_WaveExtensible;@oem16.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 klelam;klelam; C:\WINDOWS\system32\DRIVERS\klelam.sys [2015-08-30 31848]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S2 tsnethlpx64;TsNetHlpX64.sys; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\TsNetHlpX64.sys []
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BrUsbScn;@oem7.inf,%BrUsbScn.SvcDesc%;Brother MFC USB Scanner driver; C:\WINDOWS\System32\Drivers\BrUsbScn.sys [2015-09-09 14336]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-15 117248]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-11-22 25640]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NTIOLib_MB;NTIOLib_MB; \??\C:\Program Files (x86)\MSI\MSI Gaming APP\Lib\NTIOLib_X64.sys [2014-03-13 13808]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 AVP;Kaspersky Endpoint Security Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [2015-11-10 1194320]
R2 avpsus;Kaspersky Seamless Update Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe [2015-11-10 2481072]
R2 brmfrsmg;Brother Resource manager service; C:\WINDOWS\system32\BrmfRsmg.exe [2015-09-09 52736]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-09-03 34984]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-02-17 1164672]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-19 373160]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-09-11 1768912]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-15 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-02-17 1880960]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-02-17 2609024]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-03-08 1264064]
R2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-03-08 424384]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-02-17 6474112]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_392c9ec4;Hostitel synchronizace_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3af91;Hostitel synchronizace_3af91; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-19 300968]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-01-02 171632]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_392c9ec4;Služba zasílání zpráv_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3af91;Služba zasílání zpráv_3af91; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-09-25 2057736]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_392c9ec4;Data kontaktů_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3af91;Data kontaktů_3af91; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 20 bře 2016 22:19
od Rudy
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 21 bře 2016 21:33
od Ervd
Děkuji, vše se zdá ok.

Re: Počítač je extrémně zpomalený, asi jsem stáhl nějaký vir

Napsal: 21 bře 2016 22:27
od Rudy
Rádo se stalo! :)