VIRY.CZ

Zdravím,
Manželka má problém s notebookem. notebook je nějak celkově pomalý. Když se chce připojit na facebook, tak jí to nepustí a píše jí to že je počítač nakažen virem. AVG tady hlásilo nějakou hrozbu. přikládám log. Musím na dvakrát, celé se to sem nevleze Předem děkuji za pomoc

Logfile of random's system information tool 1.10 (written by random/random)
Run by svolb at 2016-03-21 01:16:53
Microsoft Windows 10 Home
System drive C: has 289 GB (67%) free of 430 GB
Total RAM: 3977 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:17:26, on 21.03.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\svolb\AppData\Roaming\ICQM\icq.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\svolb.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo15.msn.com/?pc=LCTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [icq] C:\Users\svolb\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: AvrcpService - Realtek Semiconductor Corporation - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CCSDK - Lenovo - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWOW64\esif_uf.exe
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GDCAgent - Lenovo - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LenovoPortalService - Unknown owner - C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Update Agent (UpdateAgentService) - Unknown owner - C:\Program Files\update\UpdateAgent.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10991 bytes

======Listing Processes======




c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-54d7-364f72984f00 /binaryPath="C:\Program Files (x86)\AVG\Av\\"



winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a7b592e4-e7f0-4098-8113-97b2cc8238cb -SystemEventPortName:HostProcess-82f47712-494e-495c-9f26-e55f1325ee93 -IoCancelEventPortName:HostProcess-afc26047-3949-41d1-b0f0-1e6fd58bb0c3 -NonStateChangingEventPortName:HostProcess-e6731949-52fd-4c87-8d27-eb46ba62b0f0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:325a204a-d469-4f99-8ace-0d8dff8d1a36 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 2849963203072
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-48b1bd18-6b63-4f9d-97ff-8d8462017e67 -SystemEventPortName:HostProcess-d9f415f5-9174-4df5-8434-bd7d21db8a79 -IoCancelEventPortName:HostProcess-fdf9c05c-7867-47a1-8195-a5d73349f4eb -NonStateChangingEventPortName:HostProcess-182bbca0-50a1-4ab8-a75c-6e6572aaf4c9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:eb4ed17c-690c-461e-9a03-3f74b8299182 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-de8e641b-e384-4fc4-ad95-b58f8aefbd12 -SystemEventPortName:HostProcess-df236cdd-9878-49ea-8d25-e5541d47e933 -IoCancelEventPortName:HostProcess-ad430d50-12ca-4255-82c4-bb2fa0de0762 -NonStateChangingEventPortName:HostProcess-a89d1ec8-d007-4b1f-84b1-ade7359c04be -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a43d1dea-a8c7-4ff2-9b9f-f5f9d69003b9 -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
C:\WINDOWS\SysWOW64\esif_uf.exe
"C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe"
"C:\Program Files (x86)\AVG\Av\avgfws.exe"

"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe"
"C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\update\UpdateAgent.exe"
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
sihost.exe
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\LenovoUtility\utility.exe"
"C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\svolb\AppData\Roaming\ICQM\icq.exe" -CU
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
/fmw.trayonly
/TRAYONLY
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"fontdrvhost.exe"
ctfmon.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe"
"C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe" 1 1 1 1
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\WINDOWS\system32\rundll32.exe" -localserver 22d8c27b-47a1-48d1-ad08-7da7abd79617
dashost.exe {7b77e0f2-7a72-4948-b9e01d8806e4b059}
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.17801.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\IdeaTouchPadPlugin\x64\CustomEventMonitor.dll,RunCustomMonitor
-name 1e838205-e013-4b63-ac7e-d2d35fcd5f82 -runas
-name 6c959452-d547-4d5f-80c0-308bf5113946 -runas
-name 873060f9-91b7-4fef-b5da-24a6646ca9ba -runas
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.302.8200.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\WINDOWS\system32\wwahost.exe" -ServerName:App.wwa
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\svolb\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=49.0.2623.87 --handshake-handle=0x1b8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2592.0.890916532\380365869" --supports-dual-gpus=false --gpu-driver-bug-workarounds=3,11,16,25,54 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Control_Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_89/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="2592.4.1036582138\1681134571" /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1088596233-1634821311-792222732-100168_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1088596233-1634821311-792222732-100168 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 600 604 612 8192 608
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe69_ Global\UsGthrCtrlFltPipeMssGthrPipe69 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"C:\Users\svolb\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-05-15 13877464]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2015-09-27 791848]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2015-07-11 230104]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-08-11 3937448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-09 551104]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-01-18 50615936]
"icq"=C:\Users\svolb\AppData\Roaming\ICQM\icq.exe [2015-12-23 39738376]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer_For_P2G8"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [2014-09-09 110344]
"CLVirtualDrive"=C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [2014-09-09 492808]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-02-18 179624]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-03-02 25512]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-21 01:16:53 ----D---- C:\rsit
2016-03-21 01:16:53 ----D---- C:\Program Files\trend micro
2016-03-13 15:50:57 ----SHD---- C:\found.000
2016-03-08 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-08 22:23:08 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-08 22:23:07 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-08 22:23:05 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-08 22:22:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-08 22:22:56 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-08 22:22:55 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-08 22:22:53 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-08 22:22:48 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-08 22:22:42 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-08 22:22:39 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-08 22:22:31 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-08 22:22:30 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-08 22:22:29 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-08 22:22:26 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-08 22:22:24 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-08 22:22:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-08 22:22:16 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-08 22:22:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-08 22:22:13 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-08 22:22:12 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-08 22:22:09 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-08 22:21:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-08 22:21:56 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-08 22:21:54 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-08 22:21:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-08 22:21:44 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-08 22:21:42 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-08 22:21:42 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-08 22:21:41 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-08 22:21:40 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-08 22:21:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-08 22:21:36 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-08 22:21:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-08 22:21:35 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-08 22:21:32 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-08 22:21:31 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-08 22:21:29 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-08 22:21:28 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-08 22:21:27 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-08 22:21:22 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-08 22:21:18 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-08 22:21:16 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-08 22:21:14 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-08 22:21:13 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-08 22:21:12 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-08 22:21:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-08 22:21:09 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-08 22:21:05 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-08 22:21:03 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-08 22:21:00 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-08 22:20:59 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-08 22:20:56 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-08 22:20:50 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-08 22:20:48 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-08 22:20:47 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-08 22:20:43 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-08 22:20:42 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-08 22:20:34 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-08 22:20:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-08 22:20:25 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-03-08 22:20:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-08 22:20:10 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-03-08 22:20:05 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:03:51 ----D---- C:\Users\svolb\AppData\Roaming\AVG
2016-03-07 20:02:46 ----D---- C:\Users\svolb\AppData\Roaming\TuneUp Software
2016-03-07 20:01:31 ----HD---- C:\$AVG
2016-03-07 19:51:23 ----D---- C:\ProgramData\MFAData
2016-03-07 19:46:22 ----HD---- C:\ProgramData\Common Files
2016-03-07 19:46:22 ----D---- C:\Program Files (x86)\AVG
2016-03-07 19:46:22 ----AD---- C:\ProgramData\Avg
2016-03-07 18:44:51 ----A---- C:\autoexec.bat
2016-03-07 18:42:07 ----A---- C:\WINDOWS\system32\drivers\EsgScanner.sys
2016-03-02 16:52:42 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:37 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 16:52:36 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 16:52:33 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 16:52:23 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 16:52:21 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 16:52:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 16:52:16 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 16:52:06 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 16:52:04 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 16:52:03 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 16:51:58 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 16:51:57 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 16:51:56 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 16:51:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 16:51:52 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 16:51:49 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 16:51:34 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 16:51:32 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 16:51:29 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 16:51:23 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 16:51:22 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 16:51:21 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 16:51:15 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 16:51:14 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-03-02 10:21:12 ----A---- C:\WINDOWS\system32\drivers\avgmfx64.sys

======List of files/folders modified in the last 1 month======

2016-03-21 01:17:05 ----D---- C:\WINDOWS\Prefetch
2016-03-21 01:16:53 ----RD---- C:\Program Files
2016-03-21 01:11:03 ----D---- C:\WINDOWS\Temp
2016-03-21 00:58:57 ----D---- C:\Users\svolb\AppData\Roaming\Skype
2016-03-21 00:54:46 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-21 00:54:46 ----D---- C:\WINDOWS\debug
2016-03-21 00:54:46 ----D---- C:\Windows
2016-03-21 00:39:00 ----D---- C:\WINDOWS\system32\sru
2016-03-20 17:48:10 ----SHD---- C:\System Volume Information
2016-03-20 17:43:09 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-20 08:03:06 ----D---- C:\WINDOWS\system32\LogFiles
2016-03-19 20:56:13 ----SHD---- C:\WINDOWS\Installer
2016-03-19 18:57:33 ----D---- C:\WINDOWS\AppReadiness
2016-03-18 15:15:11 ----HD---- C:\Program Files\WindowsApps
2016-03-16 07:40:32 ----D---- C:\WINDOWS\INF
2016-03-13 11:02:30 ----D---- C:\WINDOWS\system32\config
2016-03-13 00:01:34 ----D---- C:\WINDOWS\SYSWOW64\config
2016-03-12 16:05:30 ----D---- C:\WINDOWS\System32
2016-03-12 16:05:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-12 15:05:31 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-12 15:05:25 ----D---- C:\WINDOWS\WinSxS
2016-03-11 14:41:23 ----RSD---- C:\WINDOWS\assembly
2016-03-10 19:51:44 ----D---- C:\WINDOWS\CbsTemp
2016-03-10 19:51:29 ----D---- C:\WINDOWS\SysWOW64
2016-03-10 19:34:07 ----D---- C:\WINDOWS\system32\drivers
2016-03-10 19:31:29 ----D---- C:\WINDOWS\system32\migration
2016-03-10 19:31:26 ----D---- C:\WINDOWS\AppPatch
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Media Player
2016-03-10 19:31:26 ----D---- C:\Program Files\Internet Explorer
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 00:27:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 00:21:50 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-08 23:49:49 ----D---- C:\WINDOWS\system32\Tasks
2016-03-08 22:21:56 ----RD---- C:\Program Files (x86)
2016-03-08 22:21:53 ----D---- C:\WINDOWS\Tasks
2016-03-08 22:18:39 ----D---- C:\Program Files (x86)\Google
2016-03-08 22:10:00 ----D---- C:\vanoce2015
2016-03-08 22:01:06 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 21:30:50 ----HD---- C:\ProgramData
2016-03-08 21:30:50 ----D---- C:\ProgramData\Temp
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-07 22:53:53 ----D---- C:\ProgramData\McAfee
2016-03-07 22:53:53 ----D---- C:\Program Files\Common Files
2016-03-07 21:16:55 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-06 21:50:32 ----D---- C:\WINDOWS\rescache
2016-03-04 11:04:56 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\wbem
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Boot
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\appraiser
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Media
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Fonts
2016-03-04 11:02:46 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-04 11:02:46 ----D---- C:\WINDOWS\bcastdvr
2016-03-04 11:02:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2016-02-03 378288]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2016-03-02 269232]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 Avguniva;AVG Universal Driver; C:\WINDOWS\system32\DRIVERS\avguniva.sys [2016-01-08 23472]
R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-09-27 67608]
R0 FBFsmon;FBFsmon; C:\WINDOWS\System32\DRIVERS\FBFsmon.sys [2015-09-27 39448]
R0 MBI;@oem16.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2015-06-09 41464]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-11-06 184240]
R1 Avgfwfd;@oem38.inf,%AvgfwfdService_Desc%;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwd6a.sys [2015-08-29 97208]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2016-01-26 315312]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-12 91912]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem11.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-06-15 42328]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-02-24 84992]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2015-05-26 47096]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-05-26 251384]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-17 3788688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-05-19 4466392]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem28.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 RSP2STOR;@oem26.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-05-21 310528]
R3 rt640x64;@oem33.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-01-03 886528]
R3 RtkBtFilter;@oem34.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2016-01-03 593624]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2015-06-11 3059416]
R3 RTWlanE;@oem17.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2015-12-23 4738672]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-11 33960]
R3 SynTP;@oem21.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-08-11 612008]
R3 TXEIx64;@oem2.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-16 88592]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2016-01-07 21632]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-02-24 954368]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-01-04 117248]
S3 dg_ssudbus;@oem31.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2016-03-07 22704]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NETwNe64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\System32\drivers\NETwew01.sys [2015-07-10 3354384]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 silabenm;@oem12.inf,%silabenm.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\WINDOWS\system32\DRIVERS\silabenm.sys [2015-06-29 39536]
S3 silabser;@oem12.inf,%silabser.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Driver; C:\WINDOWS\system32\DRIVERS\silabser.sys [2015-06-29 94832]
S3 ssudmdm;@oem32.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\Av\avgfws.exe [2016-03-02 1580352]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-03-02 3934184]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-02-18 1045928]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-03-02 561104]
R2 AvrcpService;AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [2015-03-03 41176]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2015-07-21 121560]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 CCSDK;CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [2015-07-29 650680]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 esifsvc;@oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\SysWOW64\esif_uf.exe [2015-05-26 1385640]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [2015-09-27 288768]
R2 GDCAgent;GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [2015-07-30 1155512]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-17 319888]
R2 ImControllerService;System Interface Foundation Service; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2016-01-29 36808]
R2 LenovoPortalService;LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [2015-09-27 24312]
R2 OneSyncSvc_3a27e;Sync Host_3a27e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-11 237736]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-17 281488]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-24 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_3a27e;Contact Data_3a27e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e3a1;Sync Host_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d3fe;Sync Host_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e64c7;Sync Host_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-03-02 604144]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-12-24 887232]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-08-07 271296]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a27e;MessagingService_3a27e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e3a1;MessagingService_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d3fe;MessagingService_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e64c7;MessagingService_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3e3a1;Contact Data_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4d3fe;Contact Data_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_e64c7;Contact Data_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

přikládám log


# AdwCleaner v5.105 - Logfile created 21/03/2016 at 23:33:58
# Updated 21/03/2016 by Xplode
# Database : 2016-03-21.3 [Server]
# Operating system : Windows 10 Home (x64)
# Username : svolb - LAPTOP-3Q2E39J3
# Running from : C:\Users\svolb\Desktop\adwcleaner_5.105.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\svolb\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbapdklahcjljfincdglncfpdgfhckcf

***** [ Files ] *****

[-] File Deleted : C:\Users\svolb\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lbapdklahcjljfincdglncfpdgfhckcf_0.localstorage

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\Mail.Ru
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data Restored : HKU\S-1-5-21-1088596233-1634821311-792222732-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data Restored : HKU\S-1-5-21-1088596233-1634821311-792222732-1001\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]

***** [ Web browsers ] *****

[-] [C:\Users\svolb\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : lbapdklahcjljfincdglncfpdgfhckcf

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1775 bytes] - [21/03/2016 23:33:58]
C:\AdwCleaner\AdwCleaner[S2].txt - [2140 bytes] - [21/03/2016 23:27:35]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1921 bytes] ##########

Dejte nový log RSIT.

přikládám nový log, opět musím rozdělit na dvakrát

Logfile of random's system information tool 1.10 (written by random/random)
Run by svolb at 2016-03-22 23:05:58
Microsoft Windows 10 Home
System drive C: has 285 GB (66%) free of 430 GB
Total RAM: 3977 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:06:03, on 22.03.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files\trend micro\svolb.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo15.msn.com/?pc=LCTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [icq] C:\Users\svolb\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: AvrcpService - Realtek Semiconductor Corporation - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CCSDK - Lenovo - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWOW64\esif_uf.exe
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GDCAgent - Lenovo - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LenovoPortalService - Unknown owner - C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Update Agent (UpdateAgentService) - Unknown owner - C:\Program Files\update\UpdateAgent.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10647 bytes

======Listing Processes======




c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-ab8e-550d7b55fc53 /binaryPath="C:\Program Files (x86)\AVG\Av\\"



winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-05ba8990-9594-4b92-95e1-6689a699e98f -SystemEventPortName:HostProcess-46f8426c-059f-47de-b317-319b565b65cc -IoCancelEventPortName:HostProcess-e177f40d-c277-4beb-b33c-138b5bf3b9a4 -NonStateChangingEventPortName:HostProcess-7d9fdce8-6095-4807-989a-528667993e2b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e8b75b8c-9fa0-4365-a305-128435bd2970 -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 2400764859056
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b537d046-2dec-4740-abfd-473332ec8491 -SystemEventPortName:HostProcess-28636bc4-5055-4b99-a99a-d90b48ae398e -IoCancelEventPortName:HostProcess-4570a35f-c4f8-4c42-9c09-a14f15cc61da -NonStateChangingEventPortName:HostProcess-7206c973-8d2d-4a56-abf6-6347e792a38a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8881397b-66a1-4e18-a349-f9597c991233 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-22898482-5e19-4bf0-a615-b9667446ac65 -SystemEventPortName:HostProcess-0f384661-8b6c-4d3e-9948-1b8a2c3e4385 -IoCancelEventPortName:HostProcess-f3f58bcd-c755-439f-ae3e-5df2fb1b495d -NonStateChangingEventPortName:HostProcess-9049aa18-67a0-4995-9e8e-8abfece091bd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:16aa8066-e165-469e-999a-98738443367f -DeviceGroupId:
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe"
"C:\Program Files (x86)\AVG\Av\avgfws.exe"
C:\WINDOWS\SysWOW64\esif_uf.exe

"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe"
"c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
"C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe"
sihost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\update\UpdateAgent.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\LenovoUtility\utility.exe"
"C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe"
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
/TRAYONLY
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"fontdrvhost.exe"
ctfmon.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe" 1 1 1 1
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.302.8200.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\WINDOWS\system32\wwahost.exe" -ServerName:App.wwa
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
dashost.exe {690029f2-5c83-4bfe-946cf26fe511c698}
"C:\WINDOWS\system32\rundll32.exe" -localserver 22d8c27b-47a1-48d1-ad08-7da7abd79617
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.17801.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:12184 CREDAT:140545 EDGEHOST /prefetch:6

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:12184 CREDAT:140548 EDGEHOST /prefetch:6
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1088596233-1634821311-792222732-100172_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1088596233-1634821311-792222732-100172 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\IdeaTouchPadPlugin\x64\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\wbem\wmiprvse.exe
-name 6d83dd89-8c8e-4792-9bc3-ebb698a41aba -runas
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe73_ Global\UsGthrCtrlFltPipeMssGthrPipe73 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
-name 6af2cea8-fe87-4c91-901b-5f8ced6f740c -runas

"C:\Users\svolb\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-05-15 13877464]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2015-09-27 791848]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2015-07-11 230104]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-08-11 3937448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-09 551104]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-01-18 50615936]
"icq"=C:\Users\svolb\AppData\Roaming\ICQM\icq.exe [2015-12-23 39738376]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer_For_P2G8"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [2014-09-09 110344]
"CLVirtualDrive"=C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [2014-09-09 492808]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-02-18 179624]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-03-02 25512]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-21 23:24:23 ----D---- C:\AdwCleaner
2016-03-21 01:16:53 ----D---- C:\rsit
2016-03-21 01:16:53 ----D---- C:\Program Files\trend micro
2016-03-13 15:50:57 ----SHD---- C:\found.000
2016-03-08 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-08 22:23:08 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-08 22:23:07 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-08 22:23:05 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-08 22:22:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-08 22:22:56 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-08 22:22:55 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-08 22:22:53 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-08 22:22:48 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-08 22:22:42 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-08 22:22:39 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-08 22:22:31 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-08 22:22:30 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-08 22:22:29 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-08 22:22:26 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-08 22:22:24 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-08 22:22:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-08 22:22:16 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-08 22:22:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-08 22:22:13 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-08 22:22:12 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-08 22:22:09 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-08 22:21:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-08 22:21:56 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-08 22:21:54 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-08 22:21:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-08 22:21:44 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-08 22:21:42 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-08 22:21:42 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-08 22:21:41 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-08 22:21:40 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-08 22:21:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-08 22:21:36 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-08 22:21:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-08 22:21:35 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-08 22:21:32 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-08 22:21:31 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-08 22:21:29 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-08 22:21:28 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-08 22:21:27 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-08 22:21:22 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-08 22:21:18 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-08 22:21:16 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-08 22:21:14 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-08 22:21:13 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-08 22:21:12 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-08 22:21:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-08 22:21:09 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-08 22:21:05 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-08 22:21:03 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-08 22:21:00 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-08 22:20:59 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-08 22:20:56 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-08 22:20:50 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-08 22:20:48 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-08 22:20:47 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-08 22:20:43 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-08 22:20:42 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-08 22:20:34 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-08 22:20:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-08 22:20:25 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-03-08 22:20:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-08 22:20:10 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-03-08 22:20:05 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:03:51 ----D---- C:\Users\svolb\AppData\Roaming\AVG
2016-03-07 20:02:46 ----D---- C:\Users\svolb\AppData\Roaming\TuneUp Software
2016-03-07 20:01:31 ----HD---- C:\$AVG
2016-03-07 19:51:23 ----D---- C:\ProgramData\MFAData
2016-03-07 19:46:22 ----HD---- C:\ProgramData\Common Files
2016-03-07 19:46:22 ----D---- C:\Program Files (x86)\AVG
2016-03-07 19:46:22 ----AD---- C:\ProgramData\Avg
2016-03-07 18:44:51 ----A---- C:\autoexec.bat
2016-03-07 18:42:07 ----A---- C:\WINDOWS\system32\drivers\EsgScanner.sys
2016-03-02 16:52:42 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:37 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 16:52:36 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 16:52:33 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 16:52:23 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 16:52:21 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 16:52:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 16:52:16 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 16:52:06 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 16:52:04 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 16:52:03 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 16:51:58 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 16:51:57 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 16:51:56 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 16:51:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 16:51:52 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 16:51:49 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 16:51:34 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 16:51:32 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 16:51:29 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 16:51:23 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 16:51:22 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 16:51:21 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 16:51:15 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 16:51:14 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-03-02 10:21:12 ----A---- C:\WINDOWS\system32\drivers\avgmfx64.sys

======List of files/folders modified in the last 1 month======

2016-03-22 23:05:41 ----D---- C:\Users\svolb\AppData\Roaming\Skype
2016-03-22 23:04:50 ----D---- C:\WINDOWS\Prefetch
2016-03-22 23:03:43 ----D---- C:\WINDOWS\Temp
2016-03-22 22:46:02 ----D---- C:\WINDOWS\system32\sru
2016-03-22 15:19:58 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-22 14:27:10 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-22 14:27:10 ----D---- C:\Windows
2016-03-22 14:13:05 ----D---- C:\WINDOWS\INF
2016-03-22 14:13:05 ----D---- C:\WINDOWS\debug
2016-03-21 23:23:05 ----D---- C:\Users\svolb\AppData\Roaming\ICQM
2016-03-21 13:06:37 ----D---- C:\WINDOWS\system32\NDF
2016-03-21 01:16:53 ----RD---- C:\Program Files
2016-03-20 17:48:10 ----SHD---- C:\System Volume Information
2016-03-20 08:03:06 ----D---- C:\WINDOWS\system32\LogFiles
2016-03-19 20:56:13 ----SHD---- C:\WINDOWS\Installer
2016-03-19 18:57:33 ----D---- C:\WINDOWS\AppReadiness
2016-03-18 15:15:11 ----HD---- C:\Program Files\WindowsApps
2016-03-13 11:02:30 ----D---- C:\WINDOWS\system32\config
2016-03-13 00:01:34 ----D---- C:\WINDOWS\SYSWOW64\config
2016-03-12 16:05:30 ----D---- C:\WINDOWS\System32
2016-03-12 16:05:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-12 15:05:31 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-12 15:05:25 ----D---- C:\WINDOWS\WinSxS
2016-03-11 14:41:23 ----RSD---- C:\WINDOWS\assembly
2016-03-10 19:51:44 ----D---- C:\WINDOWS\CbsTemp
2016-03-10 19:51:29 ----D---- C:\WINDOWS\SysWOW64
2016-03-10 19:34:07 ----D---- C:\WINDOWS\system32\drivers
2016-03-10 19:31:29 ----D---- C:\WINDOWS\system32\migration
2016-03-10 19:31:26 ----D---- C:\WINDOWS\AppPatch
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Media Player
2016-03-10 19:31:26 ----D---- C:\Program Files\Internet Explorer
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 00:27:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 00:21:50 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-08 23:49:49 ----D---- C:\WINDOWS\system32\Tasks
2016-03-08 22:21:56 ----RD---- C:\Program Files (x86)
2016-03-08 22:21:53 ----D---- C:\WINDOWS\Tasks
2016-03-08 22:18:39 ----D---- C:\Program Files (x86)\Google
2016-03-08 22:10:00 ----D---- C:\vanoce2015
2016-03-08 22:01:06 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 21:30:50 ----HD---- C:\ProgramData
2016-03-08 21:30:50 ----D---- C:\ProgramData\Temp
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-07 22:53:53 ----D---- C:\ProgramData\McAfee
2016-03-07 22:53:53 ----D---- C:\Program Files\Common Files
2016-03-07 21:16:55 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-06 21:50:32 ----D---- C:\WINDOWS\rescache
2016-03-04 11:04:56 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\wbem
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Boot
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\appraiser
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Media
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Fonts
2016-03-04 11:02:46 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-04 11:02:46 ----D---- C:\WINDOWS\bcastdvr
2016-03-04 11:02:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2016-02-03 378288]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2016-03-02 269232]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 Avguniva;AVG Universal Driver; C:\WINDOWS\system32\DRIVERS\avguniva.sys [2016-01-08 23472]
R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-09-27 67608]
R0 FBFsmon;FBFsmon; C:\WINDOWS\System32\DRIVERS\FBFsmon.sys [2015-09-27 39448]
R0 MBI;@oem16.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2015-06-09 41464]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-11-06 184240]
R1 Avgfwfd;@oem38.inf,%AvgfwfdService_Desc%;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwd6a.sys [2015-08-29 97208]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2016-01-26 315312]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-12 91912]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem11.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-06-15 42328]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-02-24 84992]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2015-05-26 47096]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-05-26 251384]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-17 3788688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-05-19 4466392]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem28.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 RSP2STOR;@oem26.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-05-21 310528]
R3 rt640x64;@oem33.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-01-03 886528]
R3 RtkBtFilter;@oem34.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2016-01-03 593624]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2015-06-11 3059416]
R3 RTWlanE;@oem17.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2015-12-23 4738672]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-11 33960]
R3 SynTP;@oem21.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-08-11 612008]
R3 TXEIx64;@oem2.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-16 88592]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2016-01-07 21632]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-02-24 954368]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-01-04 117248]
S3 dg_ssudbus;@oem31.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2016-03-07 22704]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NETwNe64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\System32\drivers\NETwew01.sys [2015-07-10 3354384]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 silabenm;@oem12.inf,%silabenm.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\WINDOWS\system32\DRIVERS\silabenm.sys [2015-06-29 39536]
S3 silabser;@oem12.inf,%silabser.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Driver; C:\WINDOWS\system32\DRIVERS\silabser.sys [2015-06-29 94832]
S3 ssudmdm;@oem32.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\Av\avgfws.exe [2016-03-02 1580352]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-03-02 3934184]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-02-18 1045928]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-03-02 561104]
R2 AvrcpService;AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [2015-03-03 41176]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2015-07-21 121560]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 CCSDK;CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [2015-07-29 650680]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 esifsvc;@oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\SysWOW64\esif_uf.exe [2015-05-26 1385640]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [2015-09-27 288768]
R2 GDCAgent;GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [2015-07-30 1155512]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-17 319888]
R2 ImControllerService;System Interface Foundation Service; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2016-01-29 36808]
R2 LenovoPortalService;LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [2015-09-27 24312]
R2 OneSyncSvc_346cb;Sync Host_346cb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-11 237736]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-17 281488]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-24 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_346cb;Contact Data_346cb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e3a1;Sync Host_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d3fe;Sync Host_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e64c7;Sync Host_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-03-02 604144]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-12-24 887232]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-08-07 271296]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_346cb;MessagingService_346cb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e3a1;MessagingService_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d3fe;MessagingService_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e64c7;MessagingService_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3e3a1;Contact Data_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4d3fe;Contact Data_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_e64c7;Contact Data_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\Skype\Toolbars
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]/64

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

přikládám aktuální log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by svolb at 2016-03-23 23:55:58
Microsoft Windows 10 Home
System drive C: has 282 GB (66%) free of 430 GB
Total RAM: 3977 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:56:04, on 23.03.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\svolb\AppData\Roaming\ICQM\icq.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\svolb.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo15.msn.com/?pc=LCTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKCU\..\Run: [OneDrive] "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [icq] C:\Users\svolb\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\svolb\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AvrcpService - Realtek Semiconductor Corporation - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CCSDK - Lenovo - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWOW64\esif_uf.exe
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GDCAgent - Lenovo - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LenovoPortalService - Unknown owner - C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Update Agent (UpdateAgentService) - Unknown owner - C:\Program Files\update\UpdateAgent.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10414 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5f07e4ab-f632-4087-8290-7ee02d7f532e -SystemEventPortName:HostProcess-0372a8a0-7afe-4208-b740-18c82389a76b -IoCancelEventPortName:HostProcess-e5b4d52b-c05a-44fd-ac80-200211189297 -NonStateChangingEventPortName:HostProcess-7031be31-e4f7-4626-8b4e-ff857a2c5593 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a0f2b26c-0920-4069-8e81-22ca8659fdc5 -DeviceGroupId:
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\system32\WLANExt.exe 1779633448016
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-23b0cc63-124a-4310-830d-f692a6db67cc -SystemEventPortName:HostProcess-b872ade6-c356-442a-af82-7449ce4d7eaa -IoCancelEventPortName:HostProcess-b79439ff-cf12-4632-b69d-f8a481a74775 -NonStateChangingEventPortName:HostProcess-a5dc064b-687a-48e4-9afc-0a1997533ee9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4ce66386-aa8a-4bab-9365-53aef024f362 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2a1caa31-36c7-45ad-bd26-8948810547d8 -SystemEventPortName:HostProcess-58d2abae-c804-4439-af47-08307e68f45e -IoCancelEventPortName:HostProcess-2ed1e87e-54d1-4ea0-8d09-a7f89251f867 -NonStateChangingEventPortName:HostProcess-fee78a19-9441-444a-b438-f2b5a1bbe59c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ac920ed2-6c4a-4f5f-924c-d173b92d236e -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe"
C:\WINDOWS\SysWOW64\esif_uf.exe
"C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe"
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
"C:\Program Files\update\UpdateAgent.exe"

"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
taskeng.exe {315EAAEA-E484-4A4B-ABCA-5C835815DBF3}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Windows Defender\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges -Reinvoke
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Windows Defender\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdate
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer

"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe"
"C:\Program Files\lenovo\BatteryGauge\BatteryGaugeIcon.exe"
-name 82a19fb8-30c7-4f4c-b99b-2b60a8218a60 -runas
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\IdeaKeyboardPlugin\x64\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\wbem\wmiprvse.exe
-name aca78cfe-e0f3-42e3-ab51-7114f531eedf -runas
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\LenovoUtility\utility.exe"
"C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\svolb\AppData\Roaming\ICQM\icq.exe" -CU
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
/fmw.trayonly

"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
-name 2421b70e-ee4d-4852-837e-a217a8f0f363 -runas
-name 1b67f181-db2f-42dc-8999-eba9b95e6ad0 -runas

"C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe"
"C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe" 1 1 1 1
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey FB4B3D74-DB2D-58BC-E3B9-DDABA681521B -Reinvoke
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\svolb\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=49.0.2623.87 --handshake-handle=0x1ac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6240.0.942823379\1250489706" --supports-dual-gpus=false --gpu-driver-bug-workarounds=3,11,16,25,54 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:2
-name 2e8f1120-474d-479a-b2fb-8b2f0f63c589 -runas
-name 2d7ee4dc-fd12-4308-87c6-5062a15ed0b9 -runas
"C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe" -name 26349a85-1868-4539-9804-64fcf1eb8b1b -runas SYSTEM
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Control_Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/127ByteCrimePaddingOn/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_89/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6240.2.1836028897\931349128" /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:\Users\svolb\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-05-15 13877464]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-28 1393880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2015-09-27 791848]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2015-07-11 230104]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-08-11 3937448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\svolb\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-09 551104]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-01-18 50615936]
"icq"=C:\Users\svolb\AppData\Roaming\ICQM\icq.exe [2015-12-23 39738376]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\svolb\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer_For_P2G8"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [2014-09-09 110344]
"CLVirtualDrive"=C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [2014-09-09 492808]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-02-18 179624]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-23 23:43:59 ----SHD---- C:\Config.Msi
2016-03-23 23:36:13 ----D---- C:\_OTM
2016-03-21 23:24:23 ----D---- C:\AdwCleaner
2016-03-21 01:16:53 ----D---- C:\rsit
2016-03-21 01:16:53 ----D---- C:\Program Files\trend micro
2016-03-13 15:50:57 ----SHD---- C:\found.000
2016-03-08 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-08 22:23:08 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-08 22:23:07 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-08 22:23:05 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-08 22:22:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-08 22:22:56 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-08 22:22:55 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-08 22:22:53 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-08 22:22:48 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-08 22:22:42 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-08 22:22:39 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-08 22:22:31 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-08 22:22:30 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-08 22:22:29 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-08 22:22:26 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-08 22:22:24 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-08 22:22:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-08 22:22:16 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-08 22:22:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-08 22:22:13 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-08 22:22:12 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-08 22:22:09 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-08 22:21:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-08 22:21:56 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-08 22:21:54 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-08 22:21:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-08 22:21:44 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-08 22:21:42 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-08 22:21:42 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-08 22:21:41 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-08 22:21:40 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-08 22:21:39 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-08 22:21:38 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-08 22:21:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-08 22:21:36 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-08 22:21:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-08 22:21:35 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-08 22:21:32 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-08 22:21:31 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-08 22:21:29 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-08 22:21:28 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-08 22:21:27 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-08 22:21:26 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-08 22:21:25 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-08 22:21:24 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-08 22:21:23 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-08 22:21:22 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-08 22:21:21 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-08 22:21:20 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-08 22:21:18 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-08 22:21:17 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-08 22:21:16 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-08 22:21:14 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-08 22:21:13 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-08 22:21:12 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-08 22:21:11 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-08 22:21:10 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-08 22:21:09 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-08 22:21:08 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-08 22:21:07 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-08 22:21:05 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-08 22:21:04 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-08 22:21:03 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-08 22:21:00 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-08 22:20:59 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-08 22:20:58 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-08 22:20:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-08 22:20:56 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-08 22:20:50 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-08 22:20:48 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-08 22:20:47 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-08 22:20:44 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-08 22:20:43 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-08 22:20:42 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-08 22:20:34 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-08 22:20:33 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-08 22:20:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-08 22:20:25 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-08 22:20:24 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-08 22:20:23 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-08 22:20:22 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-08 22:20:21 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-08 22:20:18 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-08 22:20:17 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-08 22:20:16 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-08 22:20:15 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-08 22:20:14 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-08 22:20:13 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-08 22:20:12 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-08 22:20:11 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-03-08 22:20:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-08 22:20:10 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-03-08 22:20:05 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-08 22:20:03 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-08 22:20:02 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-08 22:20:01 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-08 22:20:00 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-08 22:19:59 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-07 20:03:51 ----D---- C:\Users\svolb\AppData\Roaming\AVG
2016-03-07 20:02:46 ----D---- C:\Users\svolb\AppData\Roaming\TuneUp Software
2016-03-07 20:01:31 ----HD---- C:\$AVG
2016-03-07 19:51:23 ----D---- C:\ProgramData\MFAData
2016-03-07 19:46:22 ----HD---- C:\ProgramData\Common Files
2016-03-07 19:46:22 ----D---- C:\Program Files (x86)\AVG
2016-03-07 19:46:22 ----AD---- C:\ProgramData\Avg
2016-03-07 18:44:51 ----A---- C:\autoexec.bat
2016-03-07 18:42:07 ----A---- C:\WINDOWS\system32\drivers\EsgScanner.sys
2016-03-02 16:52:42 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 16:52:37 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-02 16:52:36 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-02 16:52:35 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-02 16:52:34 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-02 16:52:33 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-02 16:52:32 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-02 16:52:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-02 16:52:30 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 16:52:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-02 16:52:23 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 16:52:23 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-02 16:52:22 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-02 16:52:21 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-02 16:52:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-02 16:52:16 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-02 16:52:15 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-02 16:52:06 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-02 16:52:04 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 16:52:03 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-02 16:52:02 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-02 16:52:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 16:52:00 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 16:51:58 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 16:51:57 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 16:51:56 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-02 16:51:55 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-02 16:51:54 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-02 16:51:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-02 16:51:52 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-02 16:51:51 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-02 16:51:50 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 16:51:49 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 16:51:48 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 16:51:47 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 16:51:46 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:45 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-02 16:51:44 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-02 16:51:43 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-02 16:51:42 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-02 16:51:41 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 16:51:40 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 16:51:39 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 16:51:38 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 16:51:37 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-02 16:51:36 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-02 16:51:35 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-02 16:51:34 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 16:51:33 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-02 16:51:32 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-02 16:51:32 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-02 16:51:31 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-02 16:51:30 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-02 16:51:29 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-02 16:51:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-02 16:51:28 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-02 16:51:27 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-02 16:51:26 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-02 16:51:25 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-02 16:51:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-02 16:51:23 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-02 16:51:23 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 16:51:22 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 16:51:21 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-02 16:51:20 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 16:51:19 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 16:51:18 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 16:51:17 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-02 16:51:16 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-02 16:51:15 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 16:51:15 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-02 16:51:14 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-02 16:51:14 ----A---- C:\WINDOWS\system32\AppCapture.dll

======List of files/folders modified in the last 1 month======

2016-03-23 23:55:31 ----D---- C:\WINDOWS\Prefetch
2016-03-23 23:52:42 ----D---- C:\WINDOWS\system32\WDI
2016-03-23 23:51:50 ----D---- C:\Users\svolb\AppData\Roaming\Skype
2016-03-23 23:50:30 ----D---- C:\WINDOWS\Temp
2016-03-23 23:48:40 ----D---- C:\WINDOWS\system32\drivers
2016-03-23 23:47:58 ----D---- C:\WINDOWS\system32\sru
2016-03-23 23:46:27 ----SHD---- C:\WINDOWS\Installer
2016-03-23 23:44:44 ----D---- C:\WINDOWS\INF
2016-03-23 23:38:24 ----D---- C:\Windows
2016-03-23 23:36:14 ----RD---- C:\Program Files (x86)\Skype
2016-03-23 23:36:14 ----D---- C:\WINDOWS\Tasks
2016-03-23 23:31:45 ----AD---- C:\Program Files (x86)\OBD-DIAG
2016-03-23 23:11:12 ----D---- C:\WINDOWS\system32\config
2016-03-23 23:05:38 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-23 12:39:07 ----HD---- C:\Program Files\WindowsApps
2016-03-23 12:39:07 ----D---- C:\WINDOWS\AppReadiness
2016-03-23 08:58:16 ----D---- C:\WINDOWS\CbsTemp
2016-03-23 08:57:50 ----SHD---- C:\System Volume Information
2016-03-23 08:57:10 ----D---- C:\WINDOWS\debug
2016-03-23 00:05:07 ----D---- C:\WINDOWS\WinSxS
2016-03-22 14:27:10 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-21 23:23:05 ----D---- C:\Users\svolb\AppData\Roaming\ICQM
2016-03-21 13:06:37 ----D---- C:\WINDOWS\system32\NDF
2016-03-21 01:16:53 ----RD---- C:\Program Files
2016-03-20 08:03:06 ----D---- C:\WINDOWS\system32\LogFiles
2016-03-13 00:01:34 ----D---- C:\WINDOWS\SYSWOW64\config
2016-03-12 16:05:30 ----D---- C:\WINDOWS\System32
2016-03-12 16:05:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-12 15:05:31 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-11 14:41:23 ----RSD---- C:\WINDOWS\assembly
2016-03-10 19:51:29 ----D---- C:\WINDOWS\SysWOW64
2016-03-10 19:31:29 ----D---- C:\WINDOWS\system32\migration
2016-03-10 19:31:26 ----D---- C:\WINDOWS\AppPatch
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files\Windows Media Player
2016-03-10 19:31:26 ----D---- C:\Program Files\Internet Explorer
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-10 19:31:26 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 00:27:58 ----D---- C:\WINDOWS\system32\MRT
2016-03-09 00:21:50 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-08 23:49:49 ----D---- C:\WINDOWS\system32\Tasks
2016-03-08 22:21:56 ----RD---- C:\Program Files (x86)
2016-03-08 22:18:39 ----D---- C:\Program Files (x86)\Google
2016-03-08 22:10:00 ----D---- C:\vanoce2015
2016-03-08 22:01:06 ----D---- C:\WINDOWS\system32\catroot2
2016-03-08 21:30:50 ----HD---- C:\ProgramData
2016-03-08 21:30:50 ----D---- C:\ProgramData\Temp
2016-03-08 08:12:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-07 22:53:53 ----D---- C:\ProgramData\McAfee
2016-03-07 22:53:53 ----D---- C:\Program Files\Common Files
2016-03-07 21:16:55 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-06 21:50:32 ----D---- C:\WINDOWS\rescache
2016-03-04 11:04:56 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-04 11:02:53 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\wbem
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Dism
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\Boot
2016-03-04 11:02:49 ----D---- C:\WINDOWS\system32\appraiser
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Media
2016-03-04 11:02:46 ----RSD---- C:\WINDOWS\Fonts
2016-03-04 11:02:46 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-04 11:02:46 ----D---- C:\WINDOWS\bcastdvr
2016-03-04 11:02:46 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-09-27 67608]
R0 FBFsmon;FBFsmon; C:\WINDOWS\System32\DRIVERS\FBFsmon.sys [2015-09-27 39448]
R0 MBI;@oem16.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2015-06-09 41464]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-12 91912]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem11.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-06-15 42328]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-02-24 84992]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2015-05-26 47096]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-05-26 251384]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-17 3788688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-05-19 4466392]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem28.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 RSP2STOR;@oem26.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-05-21 310528]
R3 rt640x64;@oem33.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-01-03 886528]
R3 RtkBtFilter;@oem34.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2016-01-03 593624]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2015-06-11 3059416]
R3 RTWlanE;@oem17.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2015-12-23 4738672]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-11 33960]
R3 SynTP;@oem21.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-08-11 612008]
R3 TXEIx64;@oem2.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-16 88592]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-02-24 954368]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-01-04 117248]
S3 dg_ssudbus;@oem31.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2016-03-07 22704]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NETwNe64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\System32\drivers\NETwew01.sys [2015-07-10 3354384]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 silabenm;@oem12.inf,%silabenm.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\WINDOWS\system32\DRIVERS\silabenm.sys [2015-06-29 39536]
S3 silabser;@oem12.inf,%silabser.SvcDesc%;Silicon Labs CP210x USB to UART Bridge Driver; C:\WINDOWS\system32\DRIVERS\silabser.sys [2015-06-29 94832]
S3 ssudmdm;@oem32.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-02-18 1045928]
R2 AvrcpService;AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [2015-03-03 41176]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2015-07-21 121560]
R2 CCSDK;CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [2015-07-29 650680]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 esifsvc;@oem3.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\SysWOW64\esif_uf.exe [2015-05-26 1385640]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [2015-09-27 288768]
R2 GDCAgent;GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [2015-07-30 1155512]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-17 319888]
R2 ImControllerService;System Interface Foundation Service; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2016-01-29 36808]
R2 LenovoPortalService;LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [2015-09-27 24312]
R2 OneSyncSvc_44b64;Sync Host_44b64; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-11 237736]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 UpdateAgentService;Update Agent; C:\Program Files\update\UpdateAgent.exe [2015-09-27 226216]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-17 281488]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-24 43696]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_44b64;Contact Data_44b64; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_44b64;User Data Storage_44b64; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e3a1;Sync Host_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d3fe;Sync Host_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e64c7;Sync Host_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-08 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-12-24 887232]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-08-07 271296]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e3a1;MessagingService_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44b64;MessagingService_44b64; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d3fe;MessagingService_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e64c7;MessagingService_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3e3a1;Contact Data_3e3a1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4d3fe;Contact Data_4d3fe; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_e64c7;Contact Data_e64c7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_3e3a1;User Data Storage_3e3a1; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_4d3fe;User Data Storage_4d3fe; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_e64c7;User Data Storage_e64c7; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\svolb.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

po kliknutí na "fixchecked" to háže nějaký error, Přikládám foto

Nefixuje to položku O9. Vše fixnout nelze, je to ale zcela nefunkční zbytek, který vám v budoucnu bude zabírat jen pár bajtů místa. Nastala nějaká změna?

Jediné co se změnilo je, že mi nefunguje nabídka Start. Procesor a Disk je vytížen na 90 - 100%

Zkuste obnovu systému k datu, kdy korektně fungoval a pak proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.