VIRY.CZ

Zdravím, mohl bych poprosit o preventivní kontrolu. Děkuji.





Logfile of random's system information tool 1.10 (written by random/random)
Run by Koštejnovi at 2016-05-18 08:04:45
Microsoft Windows 10 Home
System drive C: has 624 GB (82%) free of 762 GB
Total RAM: 8091 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:04:59, on 18.05.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\APRP\aprp.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe
C:\Program Files\trend micro\Koštejnovi.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus15.msn.com/?pc=ASTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://hi.ru/search.php?q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hi.ru/?4
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll
O4 - HKLM\..\Run: [WebStorage] C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: Asus WebStorage Windows Service - ASUS Cloud Corporation - C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe
O23 - Service: Asus GiftBox Desktop (ASUSGiftBoxDekstop) - ASUS - C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Unknown owner - C:\WINDOWS\system32\IntelCpHDCPSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem18.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWOW64\esif_uf.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: WPS Office Update Service (Kingsoft_WPS_UpdateService) - Zhuhai Kingsoft Office Software Co.,Ltd - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13781 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-05bac933-6156-42cb-a894-be863976fb03 -SystemEventPortName:HostProcess-44ed304d-3047-46ae-811a-88c9c9cf07cc -IoCancelEventPortName:HostProcess-e3977097-0a08-4165-aba0-427147475f41 -NonStateChangingEventPortName:HostProcess-2a17c2d5-bbe9-45bd-bbcf-2dfa4c63ba06 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7c40a1af-b4a2-40be-b7cd-419e2bc84ad4 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {ca4c244e-5bba-469e-9ac84408dc11075d}
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\WINDOWS\SysWOW64\esif_uf.exe
"C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"


C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
sihost.exe
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\ASUS\APRP\aprp.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
igfxEM.exe
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 496 624 632 8192 628
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
igfxTray.exe
taskeng.exe {60F8A165-0ECB-4F1C-90C6-6355B55EC21F}
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding

"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe" auto
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a2d1c53f-9e08-46ab-b4a3-4e5c30beeb44 -SystemEventPortName:HostProcess-6fd13333-abc9-46d0-8b3b-a3243238e007 -IoCancelEventPortName:HostProcess-500d4651-6211-437c-b751-4547178f9ecd -NonStateChangingEventPortName:HostProcess-bd0b2787-9a35-4e03-98bb-f4028b085550 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6e560f8d-9490-41bc-b27a-eeb98274f485 -DeviceGroupId:WpdFsGroup
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-619880554-1068961169-2101655927-100111_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-619880554-1068961169-2101655927-100111 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"F:\odvirování\RSITx64.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"

C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.168_none_76587b40265ca57e\TiWorker.exe -Embedding
wmiadap.exe /R /T
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\setup\instup.exe" /instop:change

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\WpsNotifyTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe -from=task
C:\WINDOWS\tasks\WpsUpdateTask_Administrator.job - C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe -from=task

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-26 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-04-30 629256]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-26 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-12 2787264]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-01-12 1860120]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-22 554176]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50670720]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WebStorage"=C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [2015-12-24 63272]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-12-22 596528]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2016-04-07 2313408]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-05-15 7400576]

C:\Users\Koštejnovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-05-18 08:04:45 ----D---- C:\rsit
2016-05-18 08:04:45 ----D---- C:\Program Files\trend micro
2016-05-15 20:48:49 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2016-05-15 20:33:53 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2016-05-15 20:33:37 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-05-15 20:33:30 ----A---- C:\WINDOWS\avastSS.scr
2016-05-15 09:41:31 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-05-15 09:41:31 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-05-15 09:41:31 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-05-15 09:41:31 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-05-15 09:41:31 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-05-15 09:41:30 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-05-15 09:41:30 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-05-15 09:41:30 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-05-15 09:41:30 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-05-15 09:41:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-15 09:41:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-05-15 09:41:23 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-05-15 09:41:23 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-05-15 09:41:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-05-15 09:41:22 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-05-15 09:41:22 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-05-15 09:41:22 ----A---- C:\WINDOWS\system32\mos.dll
2016-05-15 09:41:22 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-05-15 09:41:21 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-05-15 09:41:21 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-05-15 09:41:21 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-05-15 09:41:20 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-05-15 09:41:17 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-05-15 09:41:13 ----A---- C:\WINDOWS\system32\shell32.dll
2016-05-15 09:41:13 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-05-15 09:41:12 ----A---- C:\WINDOWS\system32\twinui.dll
2016-05-15 09:41:12 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-15 09:41:11 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-05-15 09:41:11 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-15 09:41:10 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-05-15 09:41:10 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-05-15 09:41:09 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-05-15 09:41:09 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-05-15 09:41:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-05-15 09:41:06 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-05-15 09:41:06 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-05-15 09:41:06 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-05-15 09:41:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-05-15 09:41:05 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-05-15 09:41:05 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-05-15 09:41:05 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-05-15 09:41:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-05-15 09:41:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-05-15 09:41:04 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-05-15 09:41:02 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-05-15 09:41:01 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-05-15 09:41:00 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-15 09:41:00 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-05-15 09:41:00 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-05-15 09:41:00 ----A---- C:\WINDOWS\explorer.exe
2016-05-15 09:40:59 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-05-15 09:40:59 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-05-15 09:40:59 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-05-15 09:40:58 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-05-15 09:40:58 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-05-15 09:40:57 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-05-15 09:40:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-05-15 09:40:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-05-15 09:40:56 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-05-15 09:40:55 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-05-15 09:40:55 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-15 09:40:55 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-15 09:40:55 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-05-15 09:40:55 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\moshost.dll
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-15 09:40:54 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-05-15 09:40:53 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-15 09:40:53 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-05-15 09:40:53 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-15 09:40:53 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-15 09:40:52 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-05-15 09:40:52 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-05-15 09:40:52 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-15 09:40:51 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-05-15 09:40:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-05-15 09:40:51 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-05-15 09:40:51 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-05-15 09:40:51 ----A---- C:\WINDOWS\system32\devinv.dll
2016-05-15 09:40:50 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-05-15 09:40:50 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-05-15 09:40:50 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-05-15 09:40:50 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-05-15 09:40:50 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-05-15 09:40:49 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-05-15 09:40:49 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-05-15 09:40:49 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-05-15 09:40:49 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-05-15 09:40:49 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-05-15 09:40:49 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-15 09:40:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-05-15 09:40:48 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-05-15 09:40:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-15 09:40:48 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-05-15 09:40:48 ----A---- C:\WINDOWS\system32\invagent.dll
2016-05-15 09:40:48 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-05-15 09:40:48 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\jscript.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-05-15 09:40:47 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-05-15 09:40:46 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-05-15 09:40:45 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-05-15 09:40:45 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-05-15 09:40:45 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-05-15 09:40:45 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-15 09:40:45 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-05-15 09:40:44 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-05-15 09:40:44 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-05-15 09:40:44 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-05-15 09:40:44 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-05-15 09:40:43 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\user32.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\provengine.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-05-15 09:40:43 ----A---- C:\WINDOWS\system32\aepic.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\system32\schannel.dll
2016-05-15 09:40:42 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-05-15 09:40:41 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-05-15 09:40:41 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-05-15 09:40:41 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-05-15 09:40:41 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-05-15 09:40:41 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-15 09:40:41 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-15 09:40:40 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\shacct.dll
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\drivers\sdport.sys
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-05-15 09:40:40 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2016-05-15 09:40:39 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-05-15 09:40:39 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-05-15 09:40:39 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-05-15 09:40:39 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-15 09:40:39 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-05-15 09:40:38 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-05-15 09:40:38 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2016-05-15 09:40:38 ----A---- C:\WINDOWS\system32\wininit.exe
2016-05-15 09:40:38 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-05-15 09:40:38 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-05-15 09:40:38 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-15 09:40:37 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-05-15 09:40:37 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-05-15 09:40:36 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-05-15 09:40:36 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-15 09:40:36 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-05-15 09:40:36 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-15 09:40:35 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-15 09:40:35 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-15 09:40:34 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-05-15 09:40:34 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-15 09:40:34 ----A---- C:\WINDOWS\system32\rsaenh.dll
2016-05-15 09:40:33 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2016-05-15 09:40:33 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-05-15 09:40:33 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2016-05-15 09:40:32 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\wups.dll
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\dwminit.dll
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-05-15 09:40:32 ----A---- C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-15 09:40:31 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\hmkd.dll
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-05-15 09:40:31 ----A---- C:\WINDOWS\system32\drivers\filecrypt.sys
2016-05-15 09:40:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\system32\cryptngc.dll
2016-05-15 09:40:30 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2016-05-15 09:40:29 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-05-15 09:40:29 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2016-05-15 09:40:29 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2016-05-15 09:40:28 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-05-15 09:40:28 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2016-05-15 09:40:28 ----A---- C:\WINDOWS\SYSWOW64\ByteCodeGenerator.exe
2016-05-15 09:40:28 ----A---- C:\WINDOWS\SYSWOW64\BrowserSettingSync.dll
2016-05-15 09:40:28 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-15 09:40:25 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-15 09:40:25 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-05-15 09:40:25 ----A---- C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-15 09:40:24 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2016-05-15 09:40:24 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2016-05-15 09:40:24 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-05-15 09:40:24 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2016-05-15 09:40:24 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-15 09:40:24 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-05-15 09:40:23 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2016-05-15 09:40:23 ----A---- C:\WINDOWS\system32\wshbth.dll
2016-05-15 09:40:23 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-05-15 09:40:23 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-15 09:40:22 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-15 09:40:22 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-05-15 09:40:22 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2016-05-15 09:40:22 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-05-10 16:44:08 ----D---- C:\ProgramData\boost_interprocess
2016-05-09 21:39:11 ----A---- C:\WINDOWS\system32\amtlib.dll
2016-05-07 22:31:09 ----D---- C:\Users\Koštejnovi\AppData\Roaming\NVIDIA
2016-05-07 22:18:31 ----D---- C:\Program Files\Common Files\Adobe
2016-05-07 21:50:42 ----D---- C:\WINDOWS\Minidump
2016-05-07 21:48:58 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2016-05-07 21:34:13 ----AD---- C:\Program Files\Adobe
2016-04-26 14:50:14 ----D---- C:\ProgramData\Adobe Systems

======List of files/folders modified in the last 1 month======

2016-05-18 08:04:45 ----RD---- C:\Program Files
2016-05-18 08:04:13 ----D---- C:\Users\Koštejnovi\AppData\Roaming\Skype
2016-05-18 08:03:58 ----D---- C:\WINDOWS\Prefetch
2016-05-18 08:03:02 ----D---- C:\WINDOWS\system32\sru
2016-05-18 08:02:25 ----D---- C:\WINDOWS\Temp
2016-05-18 08:02:24 ----D---- C:\WINDOWS\System32
2016-05-18 08:02:24 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-17 18:50:01 ----SHD---- C:\System Volume Information
2016-05-17 18:06:13 ----D---- C:\WINDOWS\system32\config
2016-05-17 12:59:32 ----HD---- C:\ProgramData
2016-05-17 12:00:08 ----D---- C:\WINDOWS\system32\Tasks
2016-05-17 11:38:09 ----D---- C:\WINDOWS\rescache
2016-05-17 11:36:37 ----D---- C:\WINDOWS\Microsoft.NET
2016-05-17 10:26:05 ----D---- C:\WINDOWS\system32\catroot2
2016-05-17 10:21:04 ----RSD---- C:\WINDOWS\assembly
2016-05-17 10:05:30 ----D---- C:\WINDOWS\AppReadiness
2016-05-17 09:57:01 ----HD---- C:\Program Files\WindowsApps
2016-05-15 21:30:38 ----D---- C:\WINDOWS\SysWOW64
2016-05-15 21:25:30 ----SHDC---- C:\WINDOWS\Installer
2016-05-15 21:22:07 ----D---- C:\Users\Koštejnovi\AppData\Roaming\Adobe
2016-05-15 21:21:21 ----RSD---- C:\WINDOWS\Fonts
2016-05-15 20:57:14 ----AD---- C:\Program Files (x86)\Adobe
2016-05-15 20:56:37 ----D---- C:\ProgramData\AVAST Software
2016-05-15 20:55:34 ----D---- C:\ProgramData\Adobe
2016-05-15 20:55:29 ----D---- C:\Program Files (x86)\Common Files
2016-05-15 20:49:12 ----D---- C:\WINDOWS\INF
2016-05-15 20:48:49 ----D---- C:\WINDOWS\system32\drivers
2016-05-15 20:48:49 ----D---- C:\Program Files\AVAST Software
2016-05-15 20:36:40 ----D---- C:\Users\Koštejnovi\AppData\Roaming\AVAST Software
2016-05-15 20:33:39 ----D---- C:\WINDOWS\WinSxS
2016-05-15 20:33:37 ----D---- C:\Windows
2016-05-15 20:16:10 ----D---- C:\Program Files\Common Files
2016-05-15 20:16:10 ----D---- C:\Program Files (x86)\McAfee
2016-05-15 20:16:01 ----RD---- C:\Program Files (x86)
2016-05-15 19:58:05 ----HD---- C:\WINDOWS\ELAMBKUP
2016-05-15 13:11:20 ----D---- C:\WINDOWS\system32\DriverStore
2016-05-15 13:04:29 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-05-15 13:04:29 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-05-15 13:04:23 ----D---- C:\WINDOWS\system32\oobe
2016-05-15 13:04:23 ----D---- C:\WINDOWS\system32\migration
2016-05-15 13:04:23 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-05-15 13:04:22 ----D---- C:\WINDOWS\system32\cs-CZ
2016-05-15 13:04:22 ----D---- C:\WINDOWS\system32\appraiser
2016-05-15 13:04:19 ----D---- C:\WINDOWS\Provisioning
2016-05-15 13:04:18 ----D---- C:\WINDOWS\bcastdvr
2016-05-15 13:04:18 ----D---- C:\WINDOWS\AppPatch
2016-05-15 13:04:17 ----D---- C:\Program Files\Windows Journal
2016-05-15 13:04:17 ----D---- C:\Program Files\Internet Explorer
2016-05-15 13:04:17 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-15 09:54:11 ----D---- C:\WINDOWS\CbsTemp
2016-05-15 09:52:17 ----D---- C:\ProgramData\Microsoft Help
2016-05-15 09:51:11 ----D---- C:\WINDOWS\system32\MRT
2016-05-15 09:45:47 ----A---- C:\WINDOWS\system32\MRT.exe
2016-05-15 09:15:51 ----D---- C:\ProgramData\Package Cache
2016-05-14 15:33:11 ----D---- C:\WINDOWS\system32\NDF
2016-05-14 14:17:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-14 14:05:53 ----D---- C:\ProgramData\NVIDIA Corporation
2016-05-11 21:57:14 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-05-11 06:12:11 ----D---- C:\WINDOWS\Tasks
2016-05-10 22:25:12 ----D---- C:\Program Files (x86)\proe2001
2016-05-10 21:04:10 ----SD---- C:\ProgramData\Microsoft
2016-05-10 21:03:46 ----SD---- C:\Users\Koštejnovi\AppData\Roaming\Microsoft
2016-05-10 14:42:50 ----AD---- C:\Program Files (x86)\TeamViewer
2016-05-01 10:58:12 ----D---- C:\ProgramData\CyberLink
2016-04-30 19:40:55 ----RD---- C:\Users
2016-04-26 14:07:11 ----D---- C:\WINDOWS\LiveKernelReports
2016-04-19 15:09:10 ----D---- C:\WINDOWS\system32\CatRoot
2016-04-19 14:53:16 ----D---- C:\ProgramData\Skype
2016-04-19 14:53:08 ----RD---- C:\Program Files (x86)\Skype
2016-04-19 14:45:57 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-04-19 14:45:57 ----D---- C:\WINDOWS\system32\Boot
2016-04-19 14:45:51 ----D---- C:\WINDOWS\PolicyDefinitions

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-05-15 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-05-15 287528]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2015-08-10 1462720]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-05-15 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-05-15 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-05-15 1070904]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-05-15 465792]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2015-05-08 20096]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2015-05-08 18048]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-05-15 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-05-15 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-05-15 166432]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2016-01-31 310728]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2016-01-31 42696]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2015-05-25 21816]
R3 AsusSGDrv;@oem13.inf,%AsusSGDrv.SvcDesc%;ASUS Touch Service; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [2015-10-22 141304]
R3 athr;@oem3.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw10x.sys [2015-07-14 4317808]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-07-29 601624]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-04-23 84992]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2015-08-17 55816]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2015-08-17 53752]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-08-17 261624]
R3 HIDSwitch;@oem7.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2015-08-19 27872]
R3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2016-01-26 7858088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-07-30 4577024]
R3 IntcDAud;@oem12.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-10-06 793848]
R3 MarvinBus;@oem35.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;@oem17.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2015-09-01 185088]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-12-18 12426896]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-12 26560]
R3 nvvad_WaveExtensible;@oem32.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 rt640x64;@oem14.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-15 887552]
R3 RTSUER;@oem16.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-27 420440]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys [2005-06-14 296448]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-04-23 112640]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2016-03-29 245760]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-10-30 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-04-23 954368]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-01-26 117248]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-03-29 181248]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2016-04-07 694464]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-04-05 2021592]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [2015-07-22 123704]
R2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe [2015-05-31 71168]
R2 ASUSGiftBoxDekstop;Asus GiftBox Desktop; C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe [2015-06-12 313488]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2015-07-29 323152]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2015-04-01 107320]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-05-15 243296]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 esifsvc;@oem18.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\SysWOW64\esif_uf.exe [2015-08-17 1385640]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2015-04-14 373312]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-12 1163200]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-01-26 373160]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2015-09-19 207648]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2015-09-19 415520]
R2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-12 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-12 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-12-16 1256240]
R2 OneSyncSvc_6364bb;Hostitel synchronizace_6364bb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2014-04-14 389896]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2016-01-26 300968]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2015-05-19 335872]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-12 6308288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-26 144200]
S2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2015-05-19 7680]
S2 Kingsoft_WPS_UpdateService;WPS Office Update Service; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe [2015-08-15 133480]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_142f96;Hostitel synchronizace_142f96; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_1559b22;Hostitel synchronizace_1559b22; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2153fc;Hostitel synchronizace_2153fc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2e76d7;Hostitel synchronizace_2e76d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3161b7;Hostitel synchronizace_3161b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_362aeb;Hostitel synchronizace_362aeb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3905b7;Hostitel synchronizace_3905b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e86a9;Hostitel synchronizace_3e86a9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_40957b;Hostitel synchronizace_40957b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_431964;Hostitel synchronizace_431964; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_454ac8;Hostitel synchronizace_454ac8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_48a51;Hostitel synchronizace_48a51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a6f9c;Hostitel synchronizace_4a6f9c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4e5e3d;Hostitel synchronizace_4e5e3d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4f1951;Hostitel synchronizace_4f1951; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_540ef;Hostitel synchronizace_540ef; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_565dbd;Hostitel synchronizace_565dbd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_58d07a;Hostitel synchronizace_58d07a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5fb0d;Hostitel synchronizace_5fb0d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_8cccd7;Hostitel synchronizace_8cccd7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_99f21c2;Hostitel synchronizace_99f21c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_a6762;Hostitel synchronizace_a6762; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_dc6e539;Hostitel synchronizace_dc6e539; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2016-04-26 72704]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [2016-01-26 621472]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-12-17 265808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-26 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2015-05-22 881152]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_142f96;Služba zasílání zpráv_142f96; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_1559b22;Služba zasílání zpráv_1559b22; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2153fc;Služba zasílání zpráv_2153fc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2e76d7;Služba zasílání zpráv_2e76d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3161b7;Služba zasílání zpráv_3161b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_362aeb;Služba zasílání zpráv_362aeb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3905b7;Služba zasílání zpráv_3905b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e86a9;Služba zasílání zpráv_3e86a9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40957b;Služba zasílání zpráv_40957b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_431964;Služba zasílání zpráv_431964; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_454ac8;Služba zasílání zpráv_454ac8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_48a51;Služba zasílání zpráv_48a51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a6f9c;Služba zasílání zpráv_4a6f9c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4e5e3d;Služba zasílání zpráv_4e5e3d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4f1951;Služba zasílání zpráv_4f1951; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_540ef;Služba zasílání zpráv_540ef; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_565dbd;Služba zasílání zpráv_565dbd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_58d07a;Služba zasílání zpráv_58d07a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5fb0d;Služba zasílání zpráv_5fb0d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_6364bb;Služba zasílání zpráv_6364bb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_8cccd7;Služba zasílání zpráv_8cccd7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_99f21c2;Služba zasílání zpráv_99f21c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_a6762;Služba zasílání zpráv_a6762; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_dc6e539;Služba zasílání zpráv_dc6e539; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_142f96;Data kontaktů_142f96; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_1559b22;Data kontaktů_1559b22; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2153fc;Data kontaktů_2153fc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2e76d7;Data kontaktů_2e76d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3161b7;Data kontaktů_3161b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_362aeb;Data kontaktů_362aeb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3905b7;Data kontaktů_3905b7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3e86a9;Data kontaktů_3e86a9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_40957b;Data kontaktů_40957b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_431964;Data kontaktů_431964; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_454ac8;Data kontaktů_454ac8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_48a51;Data kontaktů_48a51; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4a6f9c;Data kontaktů_4a6f9c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4e5e3d;Data kontaktů_4e5e3d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_4f1951;Data kontaktů_4f1951; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_540ef;Data kontaktů_540ef; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_565dbd;Data kontaktů_565dbd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_58d07a;Data kontaktů_58d07a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_5fb0d;Data kontaktů_5fb0d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_6364bb;Data kontaktů_6364bb; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_8cccd7;Data kontaktů_8cccd7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_99f21c2;Data kontaktů_99f21c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_a6762;Data kontaktů_a6762; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_dc6e539;Data kontaktů_dc6e539; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Omlouvám se za zpoždění byl jsem týden služebně pryč. Nicméně zde je log. Děkuji


# AdwCleaner v5.118 - Log vytvořen 30/05/2016 v 09:03:04
# Aktualizováno 23/05/2016 by Xplode
# Databáze : 2016-05-30.1 [Server]
# Operační system : Windows 10 Home (X64)
# Uživatelské jméno : Koštejnovi - DESKTOP-DLEB85V
# Spuštěno z : F:\odvirování\adwcleaner_5.118.exe
# Nastavení : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka Smazáno : C:\Program Files (x86)\SearchesToYesbnd
[-] Složka Smazáno : C:\Program Files (x86)\Winsere
[-] Složka Smazáno : C:\Program Files (x86)\WinTaske
[-] Složka Smazáno : C:\Users\Koštejnovi\AppData\Local\Prompt Downloader
[-] Složka Smazáno : C:\Users\Koštejnovi\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
[-] Složka Smazáno : C:\extensions
[-] Složka Smazáno : C:\Users\Public\Documents\dmp

***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úlohy ] *****

[-] Úloha Smazáno : WinTaske

***** [ Registry ] *****

[-] Klíč Smazáno : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klíč Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E49F0B41-3322-11D4-AEFE-00C04F61025C}
[-] Klíč Smazáno : HKCU\Software\Prompt Downloader
[-] Klíč Smazáno : HKLM\SOFTWARE\yessearchesSoftware
[-] Klíč Smazáno : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Klíč Smazáno : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
[-] Klíč Smazáno : HKLM\SOFTWARE\{G6276374-DEEE-4AAA-A355-9016A2F98A2D}
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Klíč Smazáno : HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Obnoveno : HKU\S-1-5-21-619880554-1068961169-2101655927-1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Obnoveno : HKU\S-1-5-21-619880554-1068961169-2101655927-1001\Software\Microsoft\Internet Explorer\Main [Start Page]

***** [ Prohlížeče ] *****


*************************

:: "Tracing" klíče smazány
:: Nastavení Winsock vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2428 bytů] - [30/05/2016 09:03:04]
C:\AdwCleaner\AdwCleaner[S1].txt - [2686 bytů] - [30/05/2016 09:01:14]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2574 bytů] ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=30&t=133101 .

Omlouvám se, ale FRSTlauncher mi nejde stáhnout. Píše mi to TENTO WEB NENÍ DOSTUPNÝ Adresa DNS serveru vyosek.ic.cz nebyla nalezena.

Dejte tedy jen samotný FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:29-05-2016 02
Ran by Koštejnovi (administrator) on DESKTOP-DLEB85V (30-05-2016 21:04:44)
Running from C:\Users\Koštejnovi\Desktop
Loaded Profiles: Koštejnovi (Available Profiles: Koštejnovi)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGiftBoxDesktop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
() C:\Windows\System32\igfxTray.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSPanel.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.20961.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Inc.) C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.9.5100.0_x64__8wekyb3d8bbwe\Solitaire.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Pinnacle Systems) C:\Program Files (x86)\Pinnacle\Studio 15\Programs\Studio.exe
(Pinnacle Systems) C:\Program Files (x86)\Pinnacle\Studio 15\Programs\PER.exe
(Pinnacle Systems) C:\Program Files (x86)\Pinnacle\Studio 15\Programs\umi.exe
(Pinnacle Systems) C:\Program Files (x86)\Pinnacle\Studio 15\Programs\RM.exe
() C:\Program Files (x86)\Pinnacle\Studio 15\Import\programs\Importer.exe
(Pinnacle Systems) C:\Program Files (x86)\Pinnacle\Studio 15\Import\programs\umi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.168_none_76587b40265ca57e\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7400576 2016-05-15] (AVAST Software)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\RunOnce: [Uninstall C:\Users\Koatejnovi\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\RunOnce: [Uninstall C:\Users\Koatejnovi\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Koštejnovi\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-05-15] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 188.92.8.18 188.92.8.11
Tcpip\..\Interfaces\{50e78797-5ffb-41c0-a826-e9ba6ab8c431}: [DhcpNameServer] 192.168.64.1
Tcpip\..\Interfaces\{c2448bd8-ed8b-46e8-91c9-115c792d2e53}: [DhcpNameServer] 188.92.8.18 188.92.8.11

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-26] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-04-30] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-26] (Oracle Corporation)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-05-15]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-05-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF

Chrome:
=======
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/"
CHR Profile: C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-26]
CHR Extension: (Dokumenty Google) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-26]
CHR Extension: (Disk Google) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-26]
CHR Extension: (YouTube) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-26]
CHR Extension: (Vyhledávání Google) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-26]
CHR Extension: (Tabulky Google) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-07]
CHR Extension: (Gmail) - C:\Users\Koštejnovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-26]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-05-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-15]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-04-26] (Adobe Systems) [File not signed]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe [71168 2015-05-31] (ASUS Cloud Corporation) [File not signed]
R2 ASUSGiftBoxDekstop; C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe [313488 2015-06-12] (ASUS) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [323152 2015-07-29] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-15] (AVAST Software)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [621472 2016-01-26] (Intel Corporation)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1385640 2015-08-17] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2016-01-26] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-19] (Intel Corporation)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe [133480 2015-08-15] (Zhuhai Kingsoft Office Software Co.,Ltd)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [72704 2016-01-31] (SolidWorks) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7031056 2016-05-02] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AsusSGDrv; C:\Windows\system32\DRIVERS\AsusSGDrv.sys [141304 2015-10-22] (ASUS Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-15] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-05-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-15] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-05-15] (AVAST Software)
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4317808 2015-07-14] (Qualcomm Atheros Communications, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2016-01-31] ()
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [55816 2015-08-17] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [53752 2015-08-17] (Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [261624 2015-08-17] (Intel Corporation)
S2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2016-01-31] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185088 2015-09-01] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [887552 2015-07-15] (Realtek )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [420440 2015-05-27] (Realsil Semiconductor Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-30 21:04 - 2016-05-30 21:05 - 00022989 _____ C:\Users\Koštejnovi\Desktop\FRST.txt
2016-05-30 21:03 - 2016-05-30 21:04 - 00000000 ____D C:\FRST
2016-05-30 21:02 - 2016-05-30 19:29 - 02383872 _____ (Farbar) C:\Users\Koštejnovi\Desktop\FRST64.exe
2016-05-30 08:59 - 2016-05-30 09:03 - 00000000 ____D C:\AdwCleaner
2016-05-24 22:42 - 2016-05-24 23:42 - 00000000 ____D C:\Users\Koštejnovi\Desktop\projekt 1
2016-05-18 14:30 - 2016-05-18 14:30 - 00000000 ____D C:\Users\Public\Documents\Adobe
2016-05-18 14:30 - 2016-05-18 14:30 - 00000000 ____D C:\Users\Koštejnovi\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2016-05-18 14:22 - 2016-05-18 14:22 - 00002880 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-05-18 14:22 - 2016-05-18 14:22 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-05-18 14:22 - 2016-05-18 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-05-18 14:22 - 2016-05-18 14:22 - 00000000 ____D C:\Program Files\CCleaner
2016-05-18 14:21 - 2016-05-18 14:21 - 06882192 _____ (Piriform Ltd) C:\Users\Koštejnovi\Downloads\ccsetup517.exe
2016-05-18 14:19 - 2016-05-18 14:19 - 00001245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CS6.lnk
2016-05-18 14:18 - 2016-05-18 14:18 - 00001598 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-05-18 14:18 - 2016-05-18 14:18 - 00001137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CS6.lnk
2016-05-18 14:18 - 2016-05-18 14:18 - 00001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-05-18 08:04 - 2016-05-18 08:05 - 00000000 ____D C:\rsit
2016-05-18 08:04 - 2016-05-18 08:04 - 00000000 ____D C:\Program Files\trend micro
2016-05-15 20:55 - 2016-05-15 20:55 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-05-15 20:55 - 2016-05-15 20:55 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-05-15 20:55 - 2016-05-15 20:55 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-05-15 20:49 - 2016-05-15 20:49 - 00004020 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1463338143
2016-05-15 20:49 - 2016-05-15 20:49 - 00001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-05-15 20:48 - 2016-05-15 20:48 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-05-15 20:36 - 2016-05-15 20:36 - 00001981 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-05-15 20:33 - 2016-05-30 08:56 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-05-15 20:33 - 2016-05-15 20:33 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00465792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-05-15 20:33 - 2016-05-15 20:33 - 00287528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00166432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-05-15 20:33 - 2016-05-15 20:33 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-05-15 20:33 - 2016-05-15 20:33 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-05-15 20:00 - 2016-05-15 20:02 - 05066104 ____N (AVAST Software) C:\Users\Koštejnovi\Downloads\avast_free_antivirus_setup_online.exe
2016-05-15 11:38 - 2016-05-15 21:31 - 00000000 ___RD C:\Users\Koštejnovi\Creative Cloud Files
2016-05-15 09:41 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-15 09:41 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-15 09:41 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-15 09:41 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-15 09:41 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-15 09:41 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-15 09:41 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-15 09:41 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-15 09:41 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-15 09:41 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-15 09:41 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-15 09:41 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-15 09:41 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-15 09:41 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-15 09:41 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-15 09:41 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-15 09:41 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-15 09:41 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-15 09:41 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-15 09:41 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-15 09:41 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-15 09:41 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-15 09:41 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-15 09:41 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-15 09:41 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-15 09:41 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-15 09:41 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-15 09:41 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-15 09:41 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-15 09:41 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-15 09:41 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-15 09:41 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-15 09:41 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-15 09:41 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-15 09:41 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-15 09:41 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-15 09:41 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-15 09:41 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-15 09:41 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-15 09:41 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-15 09:41 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-15 09:41 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-15 09:41 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-15 09:41 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-15 09:41 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-15 09:41 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-15 09:41 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-15 09:41 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-15 09:41 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-15 09:41 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-15 09:40 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-15 09:40 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-15 09:40 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-15 09:40 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-15 09:40 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-15 09:40 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-15 09:40 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-15 09:40 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-15 09:40 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-15 09:40 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-15 09:40 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-15 09:40 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-15 09:40 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-15 09:40 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-15 09:40 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-15 09:40 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-15 09:40 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-15 09:40 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-15 09:40 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-15 09:40 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-15 09:40 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-15 09:40 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-15 09:40 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-15 09:40 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-15 09:40 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-15 09:40 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-15 09:40 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-15 09:40 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-15 09:40 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-15 09:40 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-15 09:40 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-15 09:40 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-15 09:40 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-15 09:40 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-15 09:40 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-15 09:40 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-15 09:40 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-15 09:40 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-15 09:40 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-15 09:40 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-15 09:40 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-15 09:40 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-15 09:40 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-15 09:40 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-15 09:40 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-15 09:40 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-15 09:40 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-15 09:40 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-15 09:40 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-15 09:40 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-15 09:40 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-15 09:40 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-15 09:40 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-15 09:40 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-15 09:40 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-15 09:40 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-15 09:40 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-15 09:40 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-15 09:40 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-15 09:40 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-15 09:40 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-15 09:40 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-15 09:40 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-15 09:40 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-15 09:40 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-15 09:40 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-15 09:40 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-15 09:40 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-15 09:40 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-15 09:40 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-15 09:40 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-15 09:40 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-15 09:40 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-15 09:40 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-15 09:40 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-15 09:40 - 2016-04-23 06:30 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-05-15 09:40 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-15 09:40 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-15 09:40 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-15 09:40 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-15 09:40 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-15 09:40 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-15 09:40 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-15 09:40 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-15 09:40 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-15 09:40 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-15 09:40 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-15 09:40 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-15 09:40 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-15 09:40 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-15 09:40 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-15 09:40 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-15 09:40 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-15 09:40 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-15 09:40 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-15 09:40 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-15 09:40 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-15 09:40 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-15 09:40 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-15 09:40 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-15 09:40 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-15 09:40 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-15 09:40 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-15 09:40 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-15 09:40 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-15 09:40 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-15 09:40 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-15 09:40 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-15 09:40 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-05-15 09:40 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-15 09:40 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-15 09:40 - 2016-04-23 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-05-15 09:40 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-15 09:40 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-15 09:40 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-15 09:40 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-15 09:40 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-15 09:40 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-15 09:40 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-15 09:40 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-15 09:40 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-15 09:40 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-15 09:40 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-15 09:40 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-15 09:40 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-15 09:40 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-15 09:40 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-15 09:40 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-15 09:40 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-15 09:40 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-15 09:40 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-15 09:40 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-15 09:40 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-15 09:40 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-15 09:40 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-15 09:40 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-15 09:40 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-15 09:40 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-15 09:40 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-15 09:40 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-15 09:40 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-15 09:40 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-15 09:40 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-15 09:40 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-15 09:40 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-15 09:40 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-15 09:40 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-15 09:40 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-15 09:16 - 2016-05-15 09:16 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-05-15 09:16 - 2016-05-15 09:16 - 00001288 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2016-05-14 15:57 - 2016-05-14 15:57 - 00000000 ____D C:\Users\Koštejnovi\Desktop\obrazynaoplochu
2016-05-14 14:12 - 2016-05-14 14:28 - 00000000 ____D C:\Users\Koštejnovi\Desktop\klipy
2016-05-10 21:04 - 2016-05-10 21:04 - 00000017 _____ C:\Users\Koštejnovi\AppData\Local\resmon.resmoncfg
2016-05-10 20:36 - 2016-05-10 21:15 - 00000000 ____D C:\Users\Koštejnovi\Desktop\Video v Premiéru
2016-05-10 16:44 - 2016-05-15 21:31 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-05-09 22:00 - 2016-05-09 22:00 - 00000000 ____D C:\Users\Koštejnovi\Documents\AdobeStockPhotos
2016-05-09 21:39 - 2015-06-23 22:06 - 02249352 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system32\amtlib.dll
2016-05-09 21:07 - 2016-05-09 21:26 - 00000000 ____D C:\Users\Koštejnovi\Desktop\Adobe After Effects CS6 Full + Crack x32 & x64
2016-05-07 22:31 - 2016-05-07 22:31 - 00000000 ____D C:\Users\Koštejnovi\AppData\Roaming\NVIDIA
2016-05-07 22:18 - 2016-05-18 14:18 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-05-07 21:50 - 2016-05-18 14:26 - 00000000 ____D C:\WINDOWS\Minidump
2016-05-07 21:49 - 2016-05-15 17:34 - 00000000 ____D C:\Users\Koštejnovi\Documents\Adobe
2016-05-07 21:48 - 2016-05-18 14:19 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-05-07 21:34 - 2016-05-18 14:19 - 00000000 ____D C:\Program Files\Adobe
2016-05-07 00:04 - 2016-05-07 00:38 - 1147198128 _____ C:\Users\Koštejnovi\Downloads\Adobe Premiere Pro CC 2014.2 8.2.0 (65) RePack by D!akov.zip
2016-05-06 22:30 - 2016-05-06 22:32 - 25033166 _____ C:\Users\Koštejnovi\Downloads\rocky-waterfall_zyfpuqjer__D.mp4
2016-05-06 22:30 - 2016-05-06 22:32 - 20594101 _____ C:\Users\Koštejnovi\Downloads\sun-over-aspen-mountains_b1ck8jkxh__D.mp4
2016-05-06 22:26 - 2016-05-06 22:28 - 28116962 _____ C:\Users\Koštejnovi\Downloads\shimmering-light-on-ocean_w1gd7m2xr__D.mp4
2016-05-06 22:25 - 2016-05-06 22:26 - 09840148 _____ C:\Users\Koštejnovi\Downloads\vibrant-alaskan-landscape-timelapse_-jy4nojgs__D.mp4
2016-05-04 16:01 - 2016-05-24 22:42 - 00000000 ____D C:\Users\Koštejnovi\Desktop\video 1
2016-05-01 10:57 - 2016-05-01 10:57 - 00000000 ____D C:\Users\Koštejnovi\AppData\Local\Cyberlink
2016-04-30 22:07 - 2016-05-01 11:58 - 00000000 ___RD C:\Users\Koštejnovi\Desktop\SMYSL DUCHOVNíHO ROZVOJE
2016-04-30 19:57 - 2016-05-02 15:01 - 00005632 _____ C:\Users\Koštejnovi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-04-30 19:40 - 2016-05-15 19:56 - 00000000 ____D C:\Users\Ko�tejnovi
2016-04-30 19:40 - 2016-04-30 19:40 - 00000000 ____D C:\Users\Koštejnovi\Documents\Updater

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-30 21:05 - 2016-01-26 09:37 - 00004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1E872763-3196-4D36-A50C-7FD39D4AD8E5}
2016-05-30 21:04 - 2015-12-17 18:11 - 00003544 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-05-30 21:04 - 2015-12-17 18:11 - 00003534 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-05-30 21:02 - 2016-03-19 18:08 - 00000000 ____D C:\Users\Koštejnovi\AppData\Roaming\Skype
2016-05-30 21:02 - 2016-01-26 09:30 - 00000165 _____ C:\Users\Koštejnovi\AppData\Roaming\sp_data.sys
2016-05-30 11:17 - 2016-01-26 11:58 - 00000992 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-30 11:10 - 2015-08-15 07:30 - 00000424 _____ C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job
2016-05-30 11:07 - 2015-08-15 07:30 - 00000424 _____ C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job
2016-05-30 10:18 - 2016-01-26 12:14 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2016-05-30 09:58 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-30 09:58 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-05-30 09:08 - 2016-01-26 11:58 - 00000988 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-30 09:07 - 2016-01-26 11:16 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-30 09:07 - 2016-01-26 09:30 - 00000000 __SHD C:\Users\Koštejnovi\IntelGraphicsProfiles
2016-05-30 09:05 - 2016-01-26 11:28 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-05-30 09:05 - 2016-01-26 11:07 - 05181112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-05-30 09:04 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-05-30 08:56 - 2016-01-26 09:34 - 00002404 _____ C:\Users\Koštejnovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-30 08:56 - 2016-01-26 09:34 - 00000000 ___RD C:\Users\Koštejnovi\OneDrive
2016-05-30 08:55 - 2016-01-26 13:07 - 00000000 ____D C:\Users\Koštejnovi\AppData\Local\CrashDumps
2016-05-25 12:28 - 2016-04-17 14:32 - 00000000 ____D C:\Users\Koštejnovi\Desktop\fotky telefon
2016-05-24 23:46 - 2016-01-26 12:12 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-24 22:33 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-05-24 22:22 - 2016-04-26 14:34 - 00000000 ____D C:\Users\Koštejnovi\Desktop\videa
2016-05-18 17:02 - 2016-04-28 09:19 - 00000000 ____D C:\Users\Koštejnovi\Desktop\ALLATRA dokumenty
2016-05-18 14:30 - 2016-01-26 09:30 - 00000000 ____D C:\Users\Koštejnovi\AppData\Roaming\Adobe
2016-05-18 14:27 - 2016-01-26 12:12 - 00000000 ____D C:\Users\Koštejnovi\AppData\Local\Adobe
2016-05-18 14:26 - 2016-01-26 12:11 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-05-18 14:26 - 2016-01-26 11:06 - 00000000 ___DC C:\WINDOWS\Panther
2016-05-18 14:18 - 2016-01-26 12:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-18 14:15 - 2016-01-26 12:12 - 00000000 ____D C:\ProgramData\Adobe
2016-05-18 08:08 - 2015-10-30 20:31 - 00752708 _____ C:\WINDOWS\system32\perfh005.dat
2016-05-18 08:08 - 2015-10-30 20:31 - 00151280 _____ C:\WINDOWS\system32\perfc005.dat
2016-05-18 08:08 - 2015-08-15 07:21 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-17 22:07 - 2016-01-26 11:19 - 00000000 ____D C:\Users\Koštejnovi
2016-05-17 11:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-15 20:56 - 2015-12-17 18:15 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-15 20:48 - 2015-12-17 18:15 - 00000000 ____D C:\Program Files\AVAST Software
2016-05-15 20:36 - 2016-03-14 20:54 - 00000000 ____D C:\Users\Koštejnovi\AppData\Roaming\AVAST Software
2016-05-15 20:16 - 2015-12-17 18:16 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-05-15 19:58 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-05-15 19:58 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-05-15 19:56 - 2016-01-25 19:10 - 00000000 ____D C:\Users\Default.migrated
2016-05-15 13:11 - 2015-12-17 17:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-15 13:04 - 2015-10-30 20:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-15 13:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-15 13:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-15 13:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-15 13:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-15 09:54 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-15 09:54 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-05-15 09:51 - 2016-01-26 09:50 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-15 09:45 - 2016-01-26 09:50 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-05-15 09:28 - 2016-01-26 11:59 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-15 09:15 - 2015-12-17 17:43 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-14 15:33 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-05-14 14:05 - 2016-01-26 11:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 06:12 - 2016-01-26 11:58 - 00004050 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 06:12 - 2016-01-26 11:58 - 00003818 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 05:46 - 2016-01-26 12:13 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-05-10 22:25 - 2016-02-15 18:51 - 00000000 ____D C:\Program Files (x86)\proe2001
2016-05-10 14:42 - 2016-01-26 12:11 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-05-10 14:42 - 2016-01-26 12:11 - 00001030 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-05-04 09:52 - 2016-01-26 12:19 - 00000000 ____D C:\Users\Koštejnovi\AppData\Local\Pinnacle
2016-05-04 08:55 - 2016-01-26 09:30 - 00000000 ____D C:\Users\Koštejnovi\AppData\Local\Packages
2016-05-01 10:58 - 2015-12-17 18:26 - 00000000 ____D C:\ProgramData\CyberLink

==================== Files in the root of some directories =======

2016-01-26 09:30 - 2016-05-30 21:02 - 0000165 _____ () C:\Users\Koštejnovi\AppData\Roaming\sp_data.sys
2016-04-30 19:57 - 2016-05-02 15:01 - 0005632 _____ () C:\Users\Koštejnovi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-10 21:04 - 2016-05-10 21:04 - 0000017 _____ () C:\Users\Koštejnovi\AppData\Local\resmon.resmoncfg
2016-01-26 11:16 - 2016-01-26 11:16 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Koštejnovi\AppData\Local\Temp\libeay32.dll
C:\Users\Koštejnovi\AppData\Local\Temp\msvcr120.dll
C:\Users\Koštejnovi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Koštejnovi\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-05-24 22:33

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Koštejnovi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\ProgramData\DP45977C.lfl
C:\Users\Koštejnovi\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version:01-06-2016
Ran by Koštejnovi (2016-06-02 13:52:39) Run:1
Running from C:\Users\Koštejnovi\Desktop
Loaded Profiles: Koštejnovi (Available Profiles: Koštejnovi)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-619880554-1068961169-2101655927-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Koštejnovi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\ProgramData\DP45977C.lfl
C:\Users\Koštejnovi\AppData\Local\Temp
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
HKU\S-1-5-21-619880554-1068961169-2101655927-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-619880554-1068961169-2101655927-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Users\Koštejnovi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully

"C:\Users\Koštejnovi\AppData\Local\Temp" folder move:

Could not move "C:\Users\Koštejnovi\AppData\Local\Temp" => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-06-02 13:57:17)

C:\Users\Koštejnovi\AppData\Local\Temp => moved successfully

==== End of Fixlog 13:57:23 ====

Smazáno. Nastala nějaká změna?

Je to mnohem lepší. Děkuji

Rádo se stalo!