Reset video nastavení
Napsal: 27 lis 2016 13:15
Zdravím,
prosím o kontrolu logu.
Při změně nastavení jasu, kontrastu či gammy v panelu NVIDIA se jakákoliv změna okamžitě resetuje zpět do defaultu.
Čili při posunu slideru dojde na chvíli ke změně, ale cca do půl vteřiny se vizuál se vrátí zpět do defaultu.
Původně jsem myslel, že je to nějaký bug týkající se hry Bioshock (protože tam jsem to zjisil), ale to, že se to děje i na úrovni nastavení ovládacího panelu NVIDIA ukazuje, že problém bude hlouběji.
Vypadá to, jako by něco bránilo změnit nastavení, ale nejsem schopen najít čím by to mohlo být.
Předem díky za jakoukoliv pomoc.
Log RSIT níže.
Logfile of random's system information tool 1.10 (written by random/random)
Run by lastsaves at 2016-11-27 13:03:53
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 12 GB (10%) free of 114 GB
Total RAM: 3966 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:03:55, on 27.11.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18500)
Boot mode: Normal
Running processes:
C:\Windows\System32\TiltWheelMouse.exe
C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe
C:\Apps\Volume 2 Portable\Volume2.exe
C:\Apps\Skype\Phone\Skype.exe
C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe
C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe
C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe
C:\Program Files\AVAST\avastui.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Apps\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
C:\Apps\MindManager 16\MmReminderService.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Apps\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\lastsaves.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Apps\MindManager 16\Mm8InternetExplorer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll
O4 - HKLM\..\Run: [WD Drive Manager] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Apps\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Apps\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [MMReminderService] C:\Apps\MindManager 16\MMReminderService.exe
O4 - HKCU\..\Run: [DesktopOK] "C:\Apps\Desktop OK\DesktopOK_x64.exe" -bg -startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GameplayTimeTracker] "C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe"
O4 - HKCU\..\Run: [Volume2] "C:\Apps\Volume 2 Portable\Volume2.exe"
O4 - HKCU\..\Run: [Skype] "C:\Apps\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [f.lux] "C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [EssentialPIM Pro Portable] "C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SandboxieControl] "C:\Apps\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O4 - Startup: Networx.lnk = C:\Apps\Networx\networx.exe
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Send Image To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/201
O8 - Extra context menu item: Send Link To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/203
O8 - Extra context menu item: Send Page To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/204
O8 - Extra context menu item: Send Text To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/202
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Send to MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Apps\MindManager 16\Mm8InternetExplorer.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Everything - Unknown owner - C:\Apps\Everything Portable\Everything.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlashFolder - zett42 - C:\Apps\Flash Folder\FlashFolder64.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Wireless Controller Service - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\Apps\Sandboxie\SbieSvc.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Apps\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Drive Manager Service (WDBtnMgrSvc.exe) - WDC - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 13128 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Apps\Sandboxie\SbieSvc.exe"
"C:\Apps\Flash Folder\FlashFolder64.exe" /startservice
"C:\Apps\Flash Folder\FlashFolder64.exe" /sethooksvc
"C:\Program Files\AVAST\AvastSvc.exe"
"C:\Apps\Flash Folder\FlashFolder.exe" /sethooksvc
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
taskeng.exe {C5AA5141-6EF0-490B-A75B-113F3F7FB9B0}
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Windows\System32\TiltWheelMouse.exe"
C:\Windows\system32\DbxSvc.exe
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Apps\Desktop OK\DesktopOK_x64.exe" -bg -startup
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe"
"C:\Apps\Volume 2 Portable\Volume2.exe"
"C:\Apps\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
"C:\Apps\Everything Portable\Everything.exe" -svc
"C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Apps\Sandboxie\SbieCtrl.exe"
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\ProgramData\MEGAsync\MEGAsync.exe"
"C:\Apps\Networx\networx.exe"
"C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE" /tsr
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe"
"C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
"C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files\AVAST\avastui.exe" /nogui
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Apps\Acrobat 9.0\Acrobat\acrotray.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
"C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe"
"C:\Apps\MindManager 16\MmReminderService.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
"C:\Apps\Gameplay Time Tracker\Support64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
\??\C:\Windows\system32\conhost.exe "16282258451789792965-2135912591369981732903712268-280877118-20601484371771177782
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Apps\Mozilla Firefox\firefox.exe" -osint -url "http://www.gameplay-time-tracker.info/"
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --service-launch
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --service-launch
taskeng.exe {529DC4C4-5A2A-4221-BF11-20850BA709F2}
"C:\Apps\Everything Portable\Everything.exe" -startup
"C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe"
"C:\Users\lastsaves\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\lastsaves\AppData\Roaming\Mozilla\Firefox\Profiles\ys1fvqbc.default
prefs.js - "browser.search.useDBForOrder" - true
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Apps\Acrobat 9.0\Acrobat\Air\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Apps\Mozilla Firefox\components\
flashplayer.xpt
C:\Apps\Mozilla Firefox\plugins\
np32dsw.dll
ShockwavePlugin.class
C:\Users\lastsaves\AppData\Roaming\Mozilla\Firefox\Profiles\ys1fvqbc.default\extensions\
cs2@dictionaries.addons.mozilla.org
cs@dictionaries.addons.mozilla.org
en-US@dictionaries.addons.mozilla.org
marcoagpinto@mail.telepac.pt
zoteroOpenOfficeIntegration@zotero.org
zoteroWinWordIntegration@zotero.org
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
{FF201111-31F0-43FD-98C7-0E142411C415}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2014-01-22 881880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-10-11 2351920]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-08-27 163528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6FE6A929-59D1-4763-91AD-29B61CFFB35B}]
CmjBrowserHelperObject Object - C:\Apps\MindManager 16\Mm8InternetExplorer.dll [2015-10-08 83144]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23 473152]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 707800]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23 186944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]
"MouseDriver"=C:\Windows\system32\TiltWheelMouse.exe [2016-04-12 241152]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-17 1854400]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2016-11-08 825184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DesktopOK"=C:\Apps\Desktop OK\DesktopOK_x64.exe [2016-03-24 460800]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2016-03-24 3696912]
"GameplayTimeTracker"=C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe [2016-03-24 985600]
"Volume2"=C:\Apps\Volume 2 Portable\Volume2.exe [2016-03-24 4766208]
"Skype"=C:\Apps\Skype\Phone\Skype.exe [2016-10-17 27011712]
"f.lux"=C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe [2016-07-02 1017224]
"EssentialPIM Pro Portable"=C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe [2016-10-06 8365272]
"OneDrive"=C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-08-28 633024]
"SandboxieControl"=C:\Apps\Sandboxie\SbieCtrl.exe [2016-11-11 798352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\steam.exe -silent []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WD Drive Manager"=C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [2009-06-26 480768]
"AvastUI.exe"=C:\Program Files\AVAST\AvastUI.exe [2016-11-15 9080768]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-11-11 25673776]
"Adobe Acrobat Speed Launcher"=C:\Apps\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2013-05-08 44128]
""= []
"Acrobat Assistant 8.0"=C:\Apps\Acrobat 9.0\Acrobat\Acrotray.exe [2013-05-08 642664]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-03-25 958576]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2016-05-14 2086240]
"MMReminderService"=C:\Apps\MindManager 16\MMReminderService.exe [2016-07-25 116424]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Users\lastsaves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MEGAsync.lnk - C:\ProgramData\MEGAsync\MEGAsync.exe
Networx.lnk - C:\Apps\Networx\networx.exe
Odeslat do OneNote.lnk - C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=181
"NoAutorun"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-11-25 16:14:09 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-11-25 16:14:09 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-11-25 16:14:09 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-11-23 14:23:46 ----D---- C:\Users\lastsaves\AppData\Roaming\Bioshock
2016-11-23 11:02:36 ----D---- C:\_
2016-11-23 08:36:32 ----SD---- C:\Windows\SYSWOW64\Microsoft
2016-11-22 09:49:40 ----D---- C:\ProgramData\Logs
2016-11-20 15:06:21 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-11-20 15:05:34 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-11-20 15:05:33 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkan-1.dll
2016-11-20 15:05:32 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-20 14:58:38 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-11-20 14:58:34 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-11-20 14:58:34 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-11-20 14:58:34 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-11-20 14:58:34 ----A---- C:\Windows\system32\nvopencl.dll
2016-11-20 14:58:33 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-11-20 14:58:33 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-11-20 14:58:33 ----A---- C:\Windows\system32\nvoglv64.dll
2016-11-20 14:58:33 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-11-20 14:58:32 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-11-20 14:58:32 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\nvinitx.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\NvIFR64.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-11-20 14:58:31 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-11-20 14:58:31 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\NvFBC64.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\nvdispgenco6437595.dll
2016-11-20 14:58:30 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-11-20 14:58:30 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvdispco6437595.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvcuvid.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvcuda.dll
2016-11-20 14:58:26 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-11-20 14:58:26 ----A---- C:\Windows\system32\nvcompiler.dll
2016-11-18 18:11:18 ----D---- C:\_VIDEO CLIPS
2016-11-17 18:26:46 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2016-11-17 18:26:41 ----D---- C:\Program Files\DIFX
2016-11-17 18:26:41 ----A---- C:\Windows\system32\drivers\XQHDrv.sys
2016-11-17 17:33:49 ----D---- C:\Program Files\Droid4Xext
2016-11-17 17:33:36 ----DC---- C:\Windows\system32\DRVSTORE
2016-11-17 17:33:36 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2016-11-17 17:33:35 ----D---- C:\Program Files\Oracle
2016-11-17 17:33:23 ----A---- C:\hsrv.txt
2016-11-17 17:31:24 ----D---- C:\ProgramData\Thunder Network
2016-11-17 17:31:23 ----D---- C:\Users\lastsaves\AppData\Roaming\HaiYuInst
2016-11-17 14:50:55 ----A---- C:\Windows\system32\nvdispgenco6437586.dll
2016-11-17 14:50:55 ----A---- C:\Windows\system32\nvdispco6437586.dll
2016-11-17 14:19:13 ----D---- C:\ProgramData\BlueStacksSetup
2016-11-15 20:33:20 ----D---- C:\Program Files (x86)\Skype
2016-11-14 15:35:26 ----D---- C:\_THESIS - SUBCULTURE
2016-11-12 10:18:41 ----D---- C:\Users\lastsaves\AppData\Roaming\DVD Flick
2016-11-12 10:18:21 ----A---- C:\Windows\SYSWOW64\ssubtmr6.dll
2016-11-11 21:44:22 ----RD---- C:\Sandbox
2016-11-11 21:42:33 ----A---- C:\Windows\Sandboxie.ini
2016-11-08 23:24:30 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-11-07 23:49:04 ----A---- C:\Windows\system32\DbxSvc.exe
2016-11-06 15:09:26 ----D---- C:\Users\lastsaves\AppData\Roaming\Leadertech
2016-11-05 09:19:42 ----D---- C:\___
2016-11-04 23:36:28 ----A---- C:\Windows\SYSWOW64\drivers\SECDRV.SYS
2016-11-04 23:35:07 ----A---- C:\Windows\eReg.dat
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\zlib1.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL_ttf.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL_gfx.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\libfreetype-6.dll
2016-10-30 13:49:55 ----A---- C:\Windows\IsUninst.exe
2016-10-29 09:34:22 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-10-29 09:34:22 ----A---- C:\Windows\system32\nvhdap64.dll
2016-10-29 09:34:22 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-10-29 09:34:21 ----A---- C:\Windows\system32\nvdispgenco6437570.dll
2016-10-29 09:34:21 ----A---- C:\Windows\system32\nvdispco6437570.dll
2016-10-29 09:21:45 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-10-29 09:21:45 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\nvspcap64.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-10-29 09:21:30 ----A---- C:\Windows\NvContainerRecovery.bat
2016-10-29 08:44:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2016-10-29 08:44:53 ----A---- C:\Windows\system32\poqexec.exe
2016-10-28 22:12:51 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-10-28 22:12:51 ----A---- C:\Windows\system32\ntvdm64.dll
2016-10-28 22:12:50 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-10-28 22:12:50 ----A---- C:\Windows\system32\occache.dll
2016-10-28 22:12:49 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-10-28 22:12:49 ----A---- C:\Windows\system32\ieui.dll
2016-10-28 22:12:46 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2016-10-28 22:12:46 ----A---- C:\Windows\system32\davclnt.dll
2016-10-28 22:12:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-10-28 22:12:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-10-28 22:12:44 ----A---- C:\Windows\system32\wsmplpxy.dll
2016-10-28 22:12:43 ----A---- C:\Windows\system32\cryptsp.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\sspisrv.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcawrk.exe
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcalua.exe
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcadm.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2016-10-28 22:12:41 ----A---- C:\Windows\SYSWOW64\wsmplpxy.dll
2016-10-28 22:12:41 ----A---- C:\Windows\system32\jsproxy.dll
2016-10-28 22:12:41 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-10-28 22:12:41 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-10-28 22:12:40 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-10-28 22:12:40 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-10-28 22:12:40 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2016-10-28 22:12:40 ----A---- C:\Windows\system32\cryptbase.dll
2016-10-28 22:12:40 ----A---- C:\Windows\system32\apisetschema.dll
2016-10-28 22:12:39 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\mferror.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\rpchttp.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\pcasvc.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\mferror.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-28 22:12:37 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\wsmprovhost.exe
2016-10-28 22:12:36 ----A---- C:\Windows\system32\wow64cpu.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\TSpkg.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\pcaevts.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\ieUnatt.exe
2016-10-28 22:12:36 ----A---- C:\Windows\system32\dxtrans.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\dxtmsft.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\csrsrv.dll
2016-10-28 22:12:35 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-10-28 22:12:35 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\winsrv.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\srclient.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\msobjs.dll
2016-10-28 22:12:34 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-10-28 22:12:34 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2016-10-28 22:12:34 ----A---- C:\Windows\system32\INETRES.dll
2016-10-28 22:12:34 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-10-28 22:12:34 ----A---- C:\Windows\system32\conhost.exe
2016-10-28 22:12:34 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-10-28 22:12:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-10-28 22:12:32 ----A---- C:\Windows\system32\msmmsp.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\ncrypt.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\msaudite.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\cryptsvc.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\cryptnet.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\rrinstaller.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\mfpmp.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\mfplat.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\lsass.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\jscript9diag.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\audiodg.exe
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\webcheck.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\inseng.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\iesetup.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\iernonce.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\ieapfltr.dll
2016-10-28 22:12:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\system32\vbscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\system32\jscript.dll
2016-10-28 22:12:27 ----A---- C:\Windows\system32\wow64win.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\user.exe
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\wow64.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\WebClnt.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\sspicli.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\smss.exe
2016-10-28 22:12:26 ----A---- C:\Windows\system32\secur32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\KernelBase.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\cryptui.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\rstrui.exe
2016-10-28 22:12:25 ----A---- C:\Windows\system32\msfeeds.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\iedkcs32.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\ie4uinit.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\WsmRes.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wsmprovhost.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-10-28 22:12:24 ----A---- C:\Windows\system32\WsmRes.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\wintrust.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\wdigest.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\schannel.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\qdvd.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\msv1_0.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\msrating.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\kerberos.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\EncDump.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\auditpol.exe
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WsmWmiPl.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WsmAuto.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2016-10-28 22:12:23 ----A---- C:\Windows\system32\srcore.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-10-28 22:12:23 ----A---- C:\Windows\system32\drivers\appid.sys
2016-10-28 22:12:23 ----A---- C:\Windows\system32\credssp.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\appidsvc.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\appidapi.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-28 22:12:22 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-10-28 22:12:22 ----A---- C:\Windows\system32\inetcomm.dll
2016-10-28 22:12:21 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-10-28 22:12:21 ----A---- C:\Windows\system32\wininet.dll
2016-10-28 22:12:21 ----A---- C:\Windows\system32\adtschema.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\urlmon.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\kernel32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\certcli.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\advapi32.dll
2016-10-28 22:12:19 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-10-28 22:12:19 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\lsasrv.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\AudioSes.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\AudioEng.dll
2016-10-28 22:12:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\jscript9.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\iertutil.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\audiosrv.dll
2016-10-28 22:12:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-10-28 22:12:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-10-28 22:12:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\mfps.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-28 22:12:16 ----A---- C:\Windows\system32\mfps.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-10-28 22:12:15 ----A---- C:\Windows\system32\mshtml.dll
2016-10-28 22:12:14 ----A---- C:\Windows\system32\WsmSvc.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\msscp.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2016-10-28 22:12:13 ----A---- C:\Windows\system32\scavengeui.dll
2016-10-28 22:12:13 ----A---- C:\Windows\system32\msnetobj.dll
2016-10-28 22:12:12 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2016-10-28 22:12:12 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\wmdrmsdk.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\msscp.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\drmv2clt.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\drmmgrtn.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\blackbox.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\mf.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2016-10-28 22:12:11 ----A---- C:\Windows\system32\ntdll.dll
2016-10-28 22:12:11 ----A---- C:\Windows\system32\mf.dll
2016-10-28 22:12:10 ----A---- C:\Windows\SYSWOW64\quartz.dll
2016-10-28 22:12:10 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2016-10-28 22:12:09 ----A---- C:\Windows\system32\win32k.sys
2016-10-28 22:12:09 ----A---- C:\Windows\system32\FntCache.dll
2016-10-28 22:12:09 ----A---- C:\Windows\system32\DWrite.dll
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\quartz.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\evr.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\crypt32.dll
2016-10-28 22:12:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-28 22:12:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-10-28 22:12:04 ----A---- C:\Windows\system32\ieframe.dll
2016-10-28 22:12:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
======List of files/folders modified in the last 1 month======
2016-11-27 13:03:54 ----D---- C:\Windows\Temp
2016-11-27 13:03:54 ----D---- C:\Program Files\trend micro
2016-11-27 13:02:08 ----D---- C:\Users\lastsaves\AppData\Roaming\Skype
2016-11-27 11:39:40 ----D---- C:\Windows\system32\config
2016-11-27 11:32:47 ----D---- C:\Windows\System32
2016-11-27 11:32:47 ----D---- C:\Windows\inf
2016-11-27 11:32:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-11-27 11:26:17 ----D---- C:\ProgramData\NVIDIA
2016-11-27 11:25:55 ----D---- C:\Windows
2016-11-27 11:25:53 ----D---- C:\ProgramData\Foxit Software
2016-11-27 11:23:22 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-11-25 23:21:17 ----AD---- C:\ProgramData\TEMP
2016-11-25 21:01:13 ----SHD---- C:\System Volume Information
2016-11-25 16:14:58 ----D---- C:\ProgramData\NVIDIA Corporation
2016-11-25 16:14:38 ----D---- C:\Windows\SysWOW64
2016-11-25 16:14:37 ----D---- C:\Windows\system32\Tasks
2016-11-25 16:14:31 ----D---- C:\Windows\system32\DriverStore
2016-11-25 16:14:20 ----D---- C:\Program Files\NVIDIA Corporation
2016-11-25 16:14:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-11-25 16:14:14 ----D---- C:\Windows\system32\drivers
2016-11-25 09:30:14 ----D---- C:\Windows\system32\NDF
2016-11-23 14:05:38 ----SHD---- C:\Windows\Installer
2016-11-23 14:04:42 ----RSD---- C:\Windows\assembly
2016-11-23 13:59:37 ----RD---- C:\Program Files (x86)
2016-11-23 13:39:27 ----D---- C:\Users\lastsaves\AppData\Roaming\MPC-HC
2016-11-23 11:11:38 ----D---- C:\Windows\Logs
2016-11-22 09:56:25 ----D---- C:\ProgramData\Licenses
2016-11-22 09:56:18 ----D---- C:\Apps
2016-11-22 09:49:40 ----HD---- C:\ProgramData
2016-11-21 21:50:05 ----D---- C:\____PRO ALI
2016-11-20 15:05:33 ----A---- C:\Windows\SYSWOW64\vulkaninfo-1-1-0-26-0.exe
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkaninfo-1-1-0-26-0.exe
2016-11-20 15:02:34 ----A---- C:\Windows\system32\nvapi64.dll
2016-11-20 15:02:32 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-11-20 15:02:29 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-11-20 15:02:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-11-20 15:02:17 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-11-17 18:26:41 ----RD---- C:\Program Files
2016-11-17 18:26:18 ----D---- C:\Windows\registration
2016-11-17 17:33:31 ----D---- C:\Windows\winsxs
2016-11-17 14:54:17 ----D---- C:\Windows\system32\CatRoot2
2016-11-17 14:14:42 ----D---- C:\Users\lastsaves\AppData\Roaming\NVIDIA
2016-11-17 02:03:43 ----A---- C:\Windows\system32\nvsvc64.dll
2016-11-17 02:03:43 ----A---- C:\Windows\system32\nvcpl.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvsvcr.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvshext.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvmctray.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-11-16 06:42:05 ----D---- C:\Program Files\AVAST
2016-11-15 20:33:25 ----D---- C:\ProgramData\Skype
2016-11-15 20:33:20 ----D---- C:\Program Files (x86)\Common Files
2016-11-14 11:36:07 ----D---- C:\ProgramData\MEGAsync
2016-11-12 11:53:44 ----D---- C:\FFOutput
2016-11-11 20:37:42 ----D---- C:\Program Files (x86)\Dropbox
2016-11-08 23:24:32 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2016-11-07 09:55:39 ----D---- C:\Users\lastsaves\AppData\Roaming\DAEMON Tools Lite
2016-11-07 09:53:41 ----D---- C:\Users\lastsaves\AppData\Roaming\GameSave Manager 3
2016-11-04 23:36:28 ----D---- C:\Windows\SYSWOW64\drivers
2016-11-04 20:49:38 ----D---- C:\Users\lastsaves\AppData\Roaming\SmartDraw
2016-11-02 15:41:29 ----D---- C:\ProgramData\Microsoft Help
2016-10-31 08:58:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-10-31 08:57:57 ----D---- C:\Windows\system32\Macromed
2016-10-29 11:50:29 ----D---- C:\Windows\rescache
2016-10-29 09:37:17 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\en-US
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\Dism
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-10-29 00:00:57 ----D---- C:\Program Files\Internet Explorer
2016-10-29 00:00:57 ----D---- C:\Program Files (x86)\Internet Explorer
2016-10-29 00:00:56 ----D---- C:\Windows\system32\en-US
2016-10-29 00:00:56 ----D---- C:\Windows\system32\Dism
2016-10-29 00:00:56 ----D---- C:\Windows\system32\cs-CZ
2016-10-29 00:00:55 ----D---- C:\Windows\system32\Boot
2016-10-29 00:00:55 ----D---- C:\Windows\AppPatch
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-10-23 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-23 293352]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2016-08-19 12520]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2016-08-19 213736]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2016-03-24 394296]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2016-08-19 199400]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-10-23 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-10-23 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-10-23 513632]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2016-08-19 516096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2016-03-24 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2016-11-17 254240]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2016-11-17 127432]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-10-23 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-10-23 163416]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k60x64.sys [2009-06-10 220672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-10-29 212936]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-25 46016]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf_amd64.sys [2016-03-24 18456]
R3 SbieDrv;SbieDrv; \??\C:\Apps\Sandboxie\SbieDrv.sys [2016-09-22 204944]
R3 t_mouse.sys;HID-compliand device; C:\Windows\system32\DRIVERS\t_mouse.sys [2016-04-12 6144]
S3 a3439fmv;a3439fmv; C:\Windows\system32\drivers\a3439fmv.sys []
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [2016-04-10 30720]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [2016-04-10 37376]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-10-23 37656]
S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\Windows\system32\DRIVERS\CVirtA64.sys [2016-05-13 14992]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-17 27584]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2016-08-19 166400]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2016-03-24 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2016-03-25 14464]
S3 WinUsb;LGE Mobile Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2016-08-19 42496]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2016-11-08 679936]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2016-11-08 79976]
S4 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne64x.sys [2016-05-13 157968]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST\AvastSvc.exe [2016-10-23 197128]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-27 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2016-08-19 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2016-11-11 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2016-08-19 27136]
R2 Everything;Everything; C:\Apps\Everything Portable\Everything.exe [2016-03-21 1832704]
R2 FlashFolder;FlashFolder; C:\Apps\Flash Folder\FlashFolder64.exe [2012-07-21 596992]
R2 FoxitReaderService;Foxit Reader Service; C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe [2016-09-04 1648840]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-11-25 462784]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2016-11-20 458176]
R2 NVIDIA Wireless Controller Service;NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [2016-11-25 1163712]
R2 SbieSvc;Sandboxie Service; C:\Apps\Sandboxie\SbieSvc.exe [2016-11-11 197264]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2016-03-24 1570520]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2016-03-24 837848]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [2009-06-26 119296]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-24 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-23 154440]
S2 SkypeUpdate;Skype Updater; C:\Apps\Skype\Updater\Updater.exe [2016-09-20 324224]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2016-08-19 27136]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-27 2271928]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-24 143144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2016-03-24 651720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-23 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-10-28 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-03-24 167880]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-11-25 462784]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-04-11 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-04-11 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-03-26 1255736]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\Windows\system32\svchost.exe [2016-08-19 27136]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
-----------------EOF-----------------
prosím o kontrolu logu.
Při změně nastavení jasu, kontrastu či gammy v panelu NVIDIA se jakákoliv změna okamžitě resetuje zpět do defaultu.
Čili při posunu slideru dojde na chvíli ke změně, ale cca do půl vteřiny se vizuál se vrátí zpět do defaultu.
Původně jsem myslel, že je to nějaký bug týkající se hry Bioshock (protože tam jsem to zjisil), ale to, že se to děje i na úrovni nastavení ovládacího panelu NVIDIA ukazuje, že problém bude hlouběji.
Vypadá to, jako by něco bránilo změnit nastavení, ale nejsem schopen najít čím by to mohlo být.
Předem díky za jakoukoliv pomoc.
Log RSIT níže.
Logfile of random's system information tool 1.10 (written by random/random)
Run by lastsaves at 2016-11-27 13:03:53
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 12 GB (10%) free of 114 GB
Total RAM: 3966 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:03:55, on 27.11.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18500)
Boot mode: Normal
Running processes:
C:\Windows\System32\TiltWheelMouse.exe
C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe
C:\Apps\Volume 2 Portable\Volume2.exe
C:\Apps\Skype\Phone\Skype.exe
C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe
C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe
C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe
C:\Program Files\AVAST\avastui.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Apps\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
C:\Apps\MindManager 16\MmReminderService.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Apps\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\lastsaves.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Apps\MindManager 16\Mm8InternetExplorer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll
O4 - HKLM\..\Run: [WD Drive Manager] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Apps\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Apps\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [MMReminderService] C:\Apps\MindManager 16\MMReminderService.exe
O4 - HKCU\..\Run: [DesktopOK] "C:\Apps\Desktop OK\DesktopOK_x64.exe" -bg -startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GameplayTimeTracker] "C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe"
O4 - HKCU\..\Run: [Volume2] "C:\Apps\Volume 2 Portable\Volume2.exe"
O4 - HKCU\..\Run: [Skype] "C:\Apps\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [f.lux] "C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [EssentialPIM Pro Portable] "C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SandboxieControl] "C:\Apps\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O4 - Startup: Networx.lnk = C:\Apps\Networx\networx.exe
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Send Image To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/201
O8 - Extra context menu item: Send Link To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/203
O8 - Extra context menu item: Send Page To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/204
O8 - Extra context menu item: Send Text To MindManager - res://C:\Apps\MindManager 16\Mm8InternetExplorer.dll/202
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Send to MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Apps\MindManager 16\Mm8InternetExplorer.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Everything - Unknown owner - C:\Apps\Everything Portable\Everything.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlashFolder - zett42 - C:\Apps\Flash Folder\FlashFolder64.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Wireless Controller Service - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\Apps\Sandboxie\SbieSvc.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Apps\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Drive Manager Service (WDBtnMgrSvc.exe) - WDC - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 13128 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Apps\Sandboxie\SbieSvc.exe"
"C:\Apps\Flash Folder\FlashFolder64.exe" /startservice
"C:\Apps\Flash Folder\FlashFolder64.exe" /sethooksvc
"C:\Program Files\AVAST\AvastSvc.exe"
"C:\Apps\Flash Folder\FlashFolder.exe" /sethooksvc
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
taskeng.exe {C5AA5141-6EF0-490B-A75B-113F3F7FB9B0}
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Windows\System32\TiltWheelMouse.exe"
C:\Windows\system32\DbxSvc.exe
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Apps\Desktop OK\DesktopOK_x64.exe" -bg -startup
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe"
"C:\Apps\Volume 2 Portable\Volume2.exe"
"C:\Apps\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
"C:\Apps\Everything Portable\Everything.exe" -svc
"C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Apps\Sandboxie\SbieCtrl.exe"
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\ProgramData\MEGAsync\MEGAsync.exe"
"C:\Apps\Networx\networx.exe"
"C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE" /tsr
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe"
"C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe" /autorun
"C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files\AVAST\avastui.exe" /nogui
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Apps\Acrobat 9.0\Acrobat\acrotray.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
"C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe"
"C:\Apps\MindManager 16\MmReminderService.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
"C:\Apps\Gameplay Time Tracker\Support64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
\??\C:\Windows\system32\conhost.exe "16282258451789792965-2135912591369981732903712268-280877118-20601484371771177782
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Apps\Mozilla Firefox\firefox.exe" -osint -url "http://www.gameplay-time-tracker.info/"
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --service-launch
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --service-launch
taskeng.exe {529DC4C4-5A2A-4221-BF11-20850BA709F2}
"C:\Apps\Everything Portable\Everything.exe" -startup
"C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe"
"C:\Users\lastsaves\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\lastsaves\AppData\Roaming\Mozilla\Firefox\Profiles\ys1fvqbc.default
prefs.js - "browser.search.useDBForOrder" - true
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Apps\Acrobat 9.0\Acrobat\Air\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Apps\Mozilla Firefox\components\
flashplayer.xpt
C:\Apps\Mozilla Firefox\plugins\
np32dsw.dll
ShockwavePlugin.class
C:\Users\lastsaves\AppData\Roaming\Mozilla\Firefox\Profiles\ys1fvqbc.default\extensions\
cs2@dictionaries.addons.mozilla.org
cs@dictionaries.addons.mozilla.org
en-US@dictionaries.addons.mozilla.org
marcoagpinto@mail.telepac.pt
zoteroOpenOfficeIntegration@zotero.org
zoteroWinWordIntegration@zotero.org
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
{FF201111-31F0-43FD-98C7-0E142411C415}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2014-01-22 881880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-10-11 2351920]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-08-27 163528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6FE6A929-59D1-4763-91AD-29B61CFFB35B}]
CmjBrowserHelperObject Object - C:\Apps\MindManager 16\Mm8InternetExplorer.dll [2015-10-08 83144]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-23 473152]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 707800]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-23 186944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]
"MouseDriver"=C:\Windows\system32\TiltWheelMouse.exe [2016-04-12 241152]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-17 1854400]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2016-11-08 825184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DesktopOK"=C:\Apps\Desktop OK\DesktopOK_x64.exe [2016-03-24 460800]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2016-03-24 3696912]
"GameplayTimeTracker"=C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe [2016-03-24 985600]
"Volume2"=C:\Apps\Volume 2 Portable\Volume2.exe [2016-03-24 4766208]
"Skype"=C:\Apps\Skype\Phone\Skype.exe [2016-10-17 27011712]
"f.lux"=C:\Users\lastsaves\AppData\Local\FluxSoftware\Flux\flux.exe [2016-07-02 1017224]
"EssentialPIM Pro Portable"=C:\APPS - PORTABLE\EssentialPIM Pro 7.0\EssentialPIM.exe [2016-10-06 8365272]
"OneDrive"=C:\Users\lastsaves\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-08-28 633024]
"SandboxieControl"=C:\Apps\Sandboxie\SbieCtrl.exe [2016-11-11 798352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\steam.exe -silent []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"WD Drive Manager"=C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [2009-06-26 480768]
"AvastUI.exe"=C:\Program Files\AVAST\AvastUI.exe [2016-11-15 9080768]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-11-11 25673776]
"Adobe Acrobat Speed Launcher"=C:\Apps\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2013-05-08 44128]
""= []
"Acrobat Assistant 8.0"=C:\Apps\Acrobat 9.0\Acrobat\Acrotray.exe [2013-05-08 642664]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-03-25 958576]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2016-05-14 2086240]
"MMReminderService"=C:\Apps\MindManager 16\MMReminderService.exe [2016-07-25 116424]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Users\lastsaves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MEGAsync.lnk - C:\ProgramData\MEGAsync\MEGAsync.exe
Networx.lnk - C:\Apps\Networx\networx.exe
Odeslat do OneNote.lnk - C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=181
"NoAutorun"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-11-25 16:14:09 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-11-25 16:14:09 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-11-25 16:14:09 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-11-23 14:23:46 ----D---- C:\Users\lastsaves\AppData\Roaming\Bioshock
2016-11-23 11:02:36 ----D---- C:\_
2016-11-23 08:36:32 ----SD---- C:\Windows\SYSWOW64\Microsoft
2016-11-22 09:49:40 ----D---- C:\ProgramData\Logs
2016-11-20 15:06:21 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-11-20 15:05:34 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-11-20 15:05:33 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkan-1.dll
2016-11-20 15:05:32 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-20 14:58:38 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-11-20 14:58:34 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-11-20 14:58:34 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-11-20 14:58:34 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-11-20 14:58:34 ----A---- C:\Windows\system32\nvopencl.dll
2016-11-20 14:58:33 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-11-20 14:58:33 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-11-20 14:58:33 ----A---- C:\Windows\system32\nvoglv64.dll
2016-11-20 14:58:33 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-11-20 14:58:32 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-11-20 14:58:32 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\nvinitx.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\NvIFR64.dll
2016-11-20 14:58:32 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-11-20 14:58:31 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-11-20 14:58:31 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\NvFBC64.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-11-20 14:58:31 ----A---- C:\Windows\system32\nvdispgenco6437595.dll
2016-11-20 14:58:30 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-11-20 14:58:30 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvdispco6437595.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvcuvid.dll
2016-11-20 14:58:30 ----A---- C:\Windows\system32\nvcuda.dll
2016-11-20 14:58:26 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-11-20 14:58:26 ----A---- C:\Windows\system32\nvcompiler.dll
2016-11-18 18:11:18 ----D---- C:\_VIDEO CLIPS
2016-11-17 18:26:46 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2016-11-17 18:26:41 ----D---- C:\Program Files\DIFX
2016-11-17 18:26:41 ----A---- C:\Windows\system32\drivers\XQHDrv.sys
2016-11-17 17:33:49 ----D---- C:\Program Files\Droid4Xext
2016-11-17 17:33:36 ----DC---- C:\Windows\system32\DRVSTORE
2016-11-17 17:33:36 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2016-11-17 17:33:35 ----D---- C:\Program Files\Oracle
2016-11-17 17:33:23 ----A---- C:\hsrv.txt
2016-11-17 17:31:24 ----D---- C:\ProgramData\Thunder Network
2016-11-17 17:31:23 ----D---- C:\Users\lastsaves\AppData\Roaming\HaiYuInst
2016-11-17 14:50:55 ----A---- C:\Windows\system32\nvdispgenco6437586.dll
2016-11-17 14:50:55 ----A---- C:\Windows\system32\nvdispco6437586.dll
2016-11-17 14:19:13 ----D---- C:\ProgramData\BlueStacksSetup
2016-11-15 20:33:20 ----D---- C:\Program Files (x86)\Skype
2016-11-14 15:35:26 ----D---- C:\_THESIS - SUBCULTURE
2016-11-12 10:18:41 ----D---- C:\Users\lastsaves\AppData\Roaming\DVD Flick
2016-11-12 10:18:21 ----A---- C:\Windows\SYSWOW64\ssubtmr6.dll
2016-11-11 21:44:22 ----RD---- C:\Sandbox
2016-11-11 21:42:33 ----A---- C:\Windows\Sandboxie.ini
2016-11-08 23:24:30 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-11-07 23:49:08 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-11-07 23:49:04 ----A---- C:\Windows\system32\DbxSvc.exe
2016-11-06 15:09:26 ----D---- C:\Users\lastsaves\AppData\Roaming\Leadertech
2016-11-05 09:19:42 ----D---- C:\___
2016-11-04 23:36:28 ----A---- C:\Windows\SYSWOW64\drivers\SECDRV.SYS
2016-11-04 23:35:07 ----A---- C:\Windows\eReg.dat
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\zlib1.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL_ttf.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL_gfx.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\SDL.dll
2016-10-30 17:14:26 ----A---- C:\Windows\SYSWOW64\libfreetype-6.dll
2016-10-30 13:49:55 ----A---- C:\Windows\IsUninst.exe
2016-10-29 09:34:22 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-10-29 09:34:22 ----A---- C:\Windows\system32\nvhdap64.dll
2016-10-29 09:34:22 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-10-29 09:34:21 ----A---- C:\Windows\system32\nvdispgenco6437570.dll
2016-10-29 09:34:21 ----A---- C:\Windows\system32\nvdispco6437570.dll
2016-10-29 09:21:45 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-10-29 09:21:45 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\nvspcap64.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-10-29 09:21:45 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-10-29 09:21:30 ----A---- C:\Windows\NvContainerRecovery.bat
2016-10-29 08:44:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2016-10-29 08:44:53 ----A---- C:\Windows\system32\poqexec.exe
2016-10-28 22:12:51 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-10-28 22:12:51 ----A---- C:\Windows\system32\ntvdm64.dll
2016-10-28 22:12:50 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-10-28 22:12:50 ----A---- C:\Windows\system32\occache.dll
2016-10-28 22:12:49 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-10-28 22:12:49 ----A---- C:\Windows\system32\ieui.dll
2016-10-28 22:12:46 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2016-10-28 22:12:46 ----A---- C:\Windows\system32\davclnt.dll
2016-10-28 22:12:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-10-28 22:12:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-10-28 22:12:44 ----A---- C:\Windows\system32\wsmplpxy.dll
2016-10-28 22:12:43 ----A---- C:\Windows\system32\cryptsp.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\sspisrv.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcawrk.exe
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcalua.exe
2016-10-28 22:12:42 ----A---- C:\Windows\system32\pcadm.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-28 22:12:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2016-10-28 22:12:41 ----A---- C:\Windows\SYSWOW64\wsmplpxy.dll
2016-10-28 22:12:41 ----A---- C:\Windows\system32\jsproxy.dll
2016-10-28 22:12:41 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-10-28 22:12:41 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-10-28 22:12:40 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-10-28 22:12:40 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-10-28 22:12:40 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2016-10-28 22:12:40 ----A---- C:\Windows\system32\cryptbase.dll
2016-10-28 22:12:40 ----A---- C:\Windows\system32\apisetschema.dll
2016-10-28 22:12:39 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-28 22:12:39 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-10-28 22:12:38 ----A---- C:\Windows\SYSWOW64\mferror.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\rpchttp.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\pcasvc.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\mferror.dll
2016-10-28 22:12:38 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-28 22:12:37 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-10-28 22:12:37 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-10-28 22:12:36 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-10-28 22:12:36 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\wsmprovhost.exe
2016-10-28 22:12:36 ----A---- C:\Windows\system32\wow64cpu.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\TSpkg.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\pcaevts.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\ieUnatt.exe
2016-10-28 22:12:36 ----A---- C:\Windows\system32\dxtrans.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\dxtmsft.dll
2016-10-28 22:12:36 ----A---- C:\Windows\system32\csrsrv.dll
2016-10-28 22:12:35 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-10-28 22:12:35 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\winsrv.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\srclient.dll
2016-10-28 22:12:35 ----A---- C:\Windows\system32\msobjs.dll
2016-10-28 22:12:34 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-10-28 22:12:34 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2016-10-28 22:12:34 ----A---- C:\Windows\system32\INETRES.dll
2016-10-28 22:12:34 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-10-28 22:12:34 ----A---- C:\Windows\system32\conhost.exe
2016-10-28 22:12:34 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-10-28 22:12:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-10-28 22:12:32 ----A---- C:\Windows\system32\msmmsp.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-10-28 22:12:31 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\ncrypt.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\msaudite.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\cryptsvc.dll
2016-10-28 22:12:31 ----A---- C:\Windows\system32\cryptnet.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2016-10-28 22:12:30 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\rrinstaller.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\mfpmp.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\mfplat.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\lsass.exe
2016-10-28 22:12:30 ----A---- C:\Windows\system32\jscript9diag.dll
2016-10-28 22:12:30 ----A---- C:\Windows\system32\audiodg.exe
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-10-28 22:12:29 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\webcheck.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\inseng.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\iesetup.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\iernonce.dll
2016-10-28 22:12:29 ----A---- C:\Windows\system32\ieapfltr.dll
2016-10-28 22:12:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\system32\vbscript.dll
2016-10-28 22:12:28 ----A---- C:\Windows\system32\jscript.dll
2016-10-28 22:12:27 ----A---- C:\Windows\system32\wow64win.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-10-28 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\user.exe
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-10-28 22:12:26 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\wow64.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\WebClnt.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\sspicli.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\smss.exe
2016-10-28 22:12:26 ----A---- C:\Windows\system32\secur32.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\KernelBase.dll
2016-10-28 22:12:26 ----A---- C:\Windows\system32\cryptui.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-10-28 22:12:25 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\rstrui.exe
2016-10-28 22:12:25 ----A---- C:\Windows\system32\msfeeds.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\iedkcs32.dll
2016-10-28 22:12:25 ----A---- C:\Windows\system32\ie4uinit.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\WsmRes.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wsmprovhost.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-10-28 22:12:24 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-10-28 22:12:24 ----A---- C:\Windows\system32\WsmRes.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\wintrust.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\wdigest.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\schannel.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\qdvd.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\msv1_0.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\msrating.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\kerberos.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\EncDump.dll
2016-10-28 22:12:24 ----A---- C:\Windows\system32\auditpol.exe
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-10-28 22:12:23 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WsmWmiPl.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WsmAuto.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2016-10-28 22:12:23 ----A---- C:\Windows\system32\srcore.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-10-28 22:12:23 ----A---- C:\Windows\system32\drivers\appid.sys
2016-10-28 22:12:23 ----A---- C:\Windows\system32\credssp.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\appidsvc.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\appidapi.dll
2016-10-28 22:12:23 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-28 22:12:22 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-10-28 22:12:22 ----A---- C:\Windows\system32\inetcomm.dll
2016-10-28 22:12:21 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-10-28 22:12:21 ----A---- C:\Windows\system32\wininet.dll
2016-10-28 22:12:21 ----A---- C:\Windows\system32\adtschema.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-10-28 22:12:20 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\urlmon.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\kernel32.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\certcli.dll
2016-10-28 22:12:20 ----A---- C:\Windows\system32\advapi32.dll
2016-10-28 22:12:19 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-10-28 22:12:19 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\lsasrv.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\AudioSes.dll
2016-10-28 22:12:19 ----A---- C:\Windows\system32\AudioEng.dll
2016-10-28 22:12:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\jscript9.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\iertutil.dll
2016-10-28 22:12:18 ----A---- C:\Windows\system32\audiosrv.dll
2016-10-28 22:12:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-10-28 22:12:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-10-28 22:12:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\mfps.dll
2016-10-28 22:12:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-28 22:12:16 ----A---- C:\Windows\system32\mfps.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-10-28 22:12:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-10-28 22:12:15 ----A---- C:\Windows\system32\mshtml.dll
2016-10-28 22:12:14 ----A---- C:\Windows\system32\WsmSvc.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\msscp.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2016-10-28 22:12:13 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2016-10-28 22:12:13 ----A---- C:\Windows\system32\scavengeui.dll
2016-10-28 22:12:13 ----A---- C:\Windows\system32\msnetobj.dll
2016-10-28 22:12:12 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2016-10-28 22:12:12 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\wmdrmsdk.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\msscp.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\drmv2clt.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\drmmgrtn.dll
2016-10-28 22:12:12 ----A---- C:\Windows\system32\blackbox.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\mf.dll
2016-10-28 22:12:11 ----A---- C:\Windows\SYSWOW64\evr.dll
2016-10-28 22:12:11 ----A---- C:\Windows\system32\ntdll.dll
2016-10-28 22:12:11 ----A---- C:\Windows\system32\mf.dll
2016-10-28 22:12:10 ----A---- C:\Windows\SYSWOW64\quartz.dll
2016-10-28 22:12:10 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2016-10-28 22:12:09 ----A---- C:\Windows\system32\win32k.sys
2016-10-28 22:12:09 ----A---- C:\Windows\system32\FntCache.dll
2016-10-28 22:12:09 ----A---- C:\Windows\system32\DWrite.dll
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-28 22:12:08 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\quartz.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\evr.dll
2016-10-28 22:12:08 ----A---- C:\Windows\system32\crypt32.dll
2016-10-28 22:12:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-28 22:12:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-10-28 22:12:04 ----A---- C:\Windows\system32\ieframe.dll
2016-10-28 22:12:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
======List of files/folders modified in the last 1 month======
2016-11-27 13:03:54 ----D---- C:\Windows\Temp
2016-11-27 13:03:54 ----D---- C:\Program Files\trend micro
2016-11-27 13:02:08 ----D---- C:\Users\lastsaves\AppData\Roaming\Skype
2016-11-27 11:39:40 ----D---- C:\Windows\system32\config
2016-11-27 11:32:47 ----D---- C:\Windows\System32
2016-11-27 11:32:47 ----D---- C:\Windows\inf
2016-11-27 11:32:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-11-27 11:26:17 ----D---- C:\ProgramData\NVIDIA
2016-11-27 11:25:55 ----D---- C:\Windows
2016-11-27 11:25:53 ----D---- C:\ProgramData\Foxit Software
2016-11-27 11:23:22 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-11-25 23:21:17 ----AD---- C:\ProgramData\TEMP
2016-11-25 21:01:13 ----SHD---- C:\System Volume Information
2016-11-25 16:14:58 ----D---- C:\ProgramData\NVIDIA Corporation
2016-11-25 16:14:38 ----D---- C:\Windows\SysWOW64
2016-11-25 16:14:37 ----D---- C:\Windows\system32\Tasks
2016-11-25 16:14:31 ----D---- C:\Windows\system32\DriverStore
2016-11-25 16:14:20 ----D---- C:\Program Files\NVIDIA Corporation
2016-11-25 16:14:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-11-25 16:14:14 ----D---- C:\Windows\system32\drivers
2016-11-25 09:30:14 ----D---- C:\Windows\system32\NDF
2016-11-23 14:05:38 ----SHD---- C:\Windows\Installer
2016-11-23 14:04:42 ----RSD---- C:\Windows\assembly
2016-11-23 13:59:37 ----RD---- C:\Program Files (x86)
2016-11-23 13:39:27 ----D---- C:\Users\lastsaves\AppData\Roaming\MPC-HC
2016-11-23 11:11:38 ----D---- C:\Windows\Logs
2016-11-22 09:56:25 ----D---- C:\ProgramData\Licenses
2016-11-22 09:56:18 ----D---- C:\Apps
2016-11-22 09:49:40 ----HD---- C:\ProgramData
2016-11-21 21:50:05 ----D---- C:\____PRO ALI
2016-11-20 15:05:33 ----A---- C:\Windows\SYSWOW64\vulkaninfo-1-1-0-26-0.exe
2016-11-20 15:05:33 ----A---- C:\Windows\system32\vulkaninfo-1-1-0-26-0.exe
2016-11-20 15:02:34 ----A---- C:\Windows\system32\nvapi64.dll
2016-11-20 15:02:32 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-11-20 15:02:29 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-11-20 15:02:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-11-20 15:02:17 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-11-17 18:26:41 ----RD---- C:\Program Files
2016-11-17 18:26:18 ----D---- C:\Windows\registration
2016-11-17 17:33:31 ----D---- C:\Windows\winsxs
2016-11-17 14:54:17 ----D---- C:\Windows\system32\CatRoot2
2016-11-17 14:14:42 ----D---- C:\Users\lastsaves\AppData\Roaming\NVIDIA
2016-11-17 02:03:43 ----A---- C:\Windows\system32\nvsvc64.dll
2016-11-17 02:03:43 ----A---- C:\Windows\system32\nvcpl.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvsvcr.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvshext.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nvmctray.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-11-17 02:03:41 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-11-16 06:42:05 ----D---- C:\Program Files\AVAST
2016-11-15 20:33:25 ----D---- C:\ProgramData\Skype
2016-11-15 20:33:20 ----D---- C:\Program Files (x86)\Common Files
2016-11-14 11:36:07 ----D---- C:\ProgramData\MEGAsync
2016-11-12 11:53:44 ----D---- C:\FFOutput
2016-11-11 20:37:42 ----D---- C:\Program Files (x86)\Dropbox
2016-11-08 23:24:32 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2016-11-07 09:55:39 ----D---- C:\Users\lastsaves\AppData\Roaming\DAEMON Tools Lite
2016-11-07 09:53:41 ----D---- C:\Users\lastsaves\AppData\Roaming\GameSave Manager 3
2016-11-04 23:36:28 ----D---- C:\Windows\SYSWOW64\drivers
2016-11-04 20:49:38 ----D---- C:\Users\lastsaves\AppData\Roaming\SmartDraw
2016-11-02 15:41:29 ----D---- C:\ProgramData\Microsoft Help
2016-10-31 08:58:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-10-31 08:57:57 ----D---- C:\Windows\system32\Macromed
2016-10-29 11:50:29 ----D---- C:\Windows\rescache
2016-10-29 09:37:17 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\en-US
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\Dism
2016-10-29 00:00:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-10-29 00:00:57 ----D---- C:\Program Files\Internet Explorer
2016-10-29 00:00:57 ----D---- C:\Program Files (x86)\Internet Explorer
2016-10-29 00:00:56 ----D---- C:\Windows\system32\en-US
2016-10-29 00:00:56 ----D---- C:\Windows\system32\Dism
2016-10-29 00:00:56 ----D---- C:\Windows\system32\cs-CZ
2016-10-29 00:00:55 ----D---- C:\Windows\system32\Boot
2016-10-29 00:00:55 ----D---- C:\Windows\AppPatch
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-10-23 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-23 293352]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2016-08-19 12520]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2016-08-19 213736]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2016-03-24 394296]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2016-08-19 199400]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-10-23 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-10-23 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-10-23 513632]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2016-08-19 516096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2016-03-24 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2016-11-17 254240]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2016-11-17 127432]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-10-23 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-10-23 163416]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k60x64.sys [2009-06-10 220672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-10-29 212936]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-25 46016]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf_amd64.sys [2016-03-24 18456]
R3 SbieDrv;SbieDrv; \??\C:\Apps\Sandboxie\SbieDrv.sys [2016-09-22 204944]
R3 t_mouse.sys;HID-compliand device; C:\Windows\system32\DRIVERS\t_mouse.sys [2016-04-12 6144]
S3 a3439fmv;a3439fmv; C:\Windows\system32\drivers\a3439fmv.sys []
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [2016-04-10 30720]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [2016-04-10 37376]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-10-23 37656]
S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\Windows\system32\DRIVERS\CVirtA64.sys [2016-05-13 14992]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-17 27584]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2016-08-19 166400]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2016-03-24 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2016-03-25 14464]
S3 WinUsb;LGE Mobile Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2016-08-19 42496]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2016-11-08 679936]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2016-11-08 79976]
S4 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne64x.sys [2016-05-13 157968]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST\AvastSvc.exe [2016-10-23 197128]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-27 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2016-08-19 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2016-11-11 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2016-08-19 27136]
R2 Everything;Everything; C:\Apps\Everything Portable\Everything.exe [2016-03-21 1832704]
R2 FlashFolder;FlashFolder; C:\Apps\Flash Folder\FlashFolder64.exe [2012-07-21 596992]
R2 FoxitReaderService;Foxit Reader Service; C:\Apps\Foxit Reader\FoxitConnectedPDFService.exe [2016-09-04 1648840]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-11-25 462784]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2016-11-20 458176]
R2 NVIDIA Wireless Controller Service;NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [2016-11-25 1163712]
R2 SbieSvc;Sandboxie Service; C:\Apps\Sandboxie\SbieSvc.exe [2016-11-11 197264]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2016-03-24 1570520]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2016-03-24 837848]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [2009-06-26 119296]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-24 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-23 154440]
S2 SkypeUpdate;Skype Updater; C:\Apps\Skype\Updater\Updater.exe [2016-09-20 324224]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2016-08-19 27136]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-27 2271928]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-24 143144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2016-03-24 651720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-23 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-10-28 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-03-24 167880]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-11-25 462784]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-04-11 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-04-11 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2016-08-19 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-03-26 1255736]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\Windows\system32\svchost.exe [2016-08-19 27136]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
-----------------EOF-----------------