VIRY.CZ

Dobry den. Po nainstalovani systemu jsem prekopiroval sobory ze zalohy a bojim se, ze jsem si i s nimi pretahl neake stenice.
V prohlizeci google se casto objevuje jiny vyhledavac(initialpage123), antivir eset hned po spusteni nachazi v bootovaci pameti neake trojany a po odstraneni se po restartu pc objevuji znovu
Prosim o pomoc

Logfile of random's system information tool 1.16 (written by random/random)
Run by Rampa at 2017-04-23 14:11:55
Microsoft Windows 10 Pro
System drive C: has 240 GB (79%) free of 305 GB
Total RAM: 8143 MB (74% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:12:00, on 23.04.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0000)
Boot mode: Normal

Running processes:
C:\Program Files\trend micro\Rampa_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7679 bytes

====== Enumerating Processes ======

C:\Windows\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\fontdrvhost.exe
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
c:\windows\system32\svchost.exe -k localservice -s nsi
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1111ea4e-4f3a-4a22-a17f-3998f9ac2284 -SystemEventPortName:HostProcess-0168e302-c42e-467e-b10f-49ee54b77ce0 -IoCancelEventPortName:HostProcess-ce43b57b-20e9-43d8-ad72-41e4b4352843 -NonStateChangingEventPortName:HostProcess-b1145e1f-4d45-4c49-bd48-73e75873c2d6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b80e3ef7-f258-4fc7-a125-31d5dd6dbb1e -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
c:\windows\system32\svchost.exe -k localservice -s netprofm
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s FontCache
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
C:\Windows\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
c:\windows\system32\svchost.exe -k netsvcs -s IKEEXT
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer
c:\windows\system32\svchost.exe -k netsvcs -s Browser
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
C:\Windows\system32\dashost.exe
C:\Windows\SysWOW64\PnkBstrA.exe
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
"C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler64.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -s WdiSystemHost
C:\Windows\System32\WinLogon.exe -SpecialSession
C:\Windows\System32\fontdrvhost.exe
C:\Windows\System32\dwm.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -s lmhosts
c:\windows\system32\sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
c:\windows\system32\taskhostw.exe
C:\Windows\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory=ChromeDefaultData
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Rampa\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=58.0.3029.81 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffd127d29b8,0x7ffd127d2980,0x7ffd127d2990
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=7708 --on-initialized-event-handle=620 --parent-handle=624 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=964 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,19,20,23,41,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x1c81 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.7563 --gpu-driver-date=10-21-2016 --service-request-channel-token=35182872CCDF32031E7EE37778FA9DBF --mojo-platform-channel-handle=1516 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=964 --primordial-pipe-token=16D5AC4F6857036802E07F6B8D3C6E99 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=16D5AC4F6857036802E07F6B8D3C6E99 --renderer-client-id=4 --mojo-platform-channel-handle=1992 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=964 --primordial-pipe-token=3AA8B1DC004813FFD95B17C8286F5089 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=3AA8B1DC004813FFD95B17C8286F5089 --renderer-client-id=5 --mojo-platform-channel-handle=2484 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=964 --primordial-pipe-token=58823BBC5383483B5DD683A9A8DF2D07 --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=58823BBC5383483B5DD683A9A8DF2D07 --renderer-client-id=7 --mojo-platform-channel-handle=4324 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=964 --primordial-pipe-token=8483BD57D60E8BC0DCEDF2B918621EAD --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=8483BD57D60E8BC0DCEDF2B918621EAD --renderer-client-id=6 --mojo-platform-channel-handle=5976 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --field-trial-handle=964 --ppapi-flash-args --lang=cs --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --service-request-channel-token=390FE3BACB08A8A2C6E1D0568C2DF43F --mojo-platform-channel-handle=6404 --ignored=" --type=renderer " /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=964 --primordial-pipe-token=45E9892BC233E55C35C5AFAD31E39980 --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=45E9892BC233E55C35C5AFAD31E39980 --renderer-client-id=14 --mojo-platform-channel-handle=6736 /prefetch:1
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\system32\AUDIODG.EXE 0x5d0
"C:\Windows\system32\SearchFilterHost.exe" 0 688 692 700 8192 696
"C:\Users\Rampa\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\AURA - C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\ESET Windows 10 upgrade – Refresh settings - C:\Program Files\Common Files\AV\ESET Smart Security 8.0\upgrade.exe
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\OneDrive Standalone Update Task v2 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\Windows\system32\tasks\Refaghtreiceied Log - "C:\Program Files (x86)\Lerjale\xgrunsp.exe" 210ec98a-a701-4b95-ad73-00922c387b90
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\Windows\system32\tasks\Microsoft\Windows\WwanSvc\NotificationTask - %SystemRoot%\System32\WiFiTask.exe wwan
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install - %systemroot%\system32\usoclient.exe ScanInstallWait
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - %systemroot%\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe -e
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Cellular - %windir%\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5 /source LogonIdleTask
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\ASUS\ASUS Product Register Service - C:\Program Files (x86)\ASUS\APRP\aprp.exe

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2017-03-30 9192960]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2017-02-07 4701888]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2017-03-23 3019552]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-04-11 9532120]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{8AA48C46-2346-11E7-AFEB-64006A5CFC23}"=C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy\Arejole.dll [2017-04-21 147456]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-23 14:11:55 ----D---- C:\rsit
2017-04-23 14:11:55 ----D---- C:\Program Files\trend micro
2017-04-23 14:02:17 ----D---- C:\Program Files\CCleaner
2017-04-22 11:59:28 ----D---- C:\Tor Browser
2017-04-21 22:44:23 ----D---- C:\Program Files\Common Files\AV
2017-04-21 22:39:07 ----D---- C:\Users\Rampa\AppData\Roaming\ESET
2017-04-21 22:36:29 ----D---- C:\ProgramData\ESET
2017-04-21 22:36:29 ----D---- C:\Program Files\ESET
2017-04-21 22:03:50 ----D---- C:\ProgramData\Seznam DVD 2011
2017-04-21 22:03:48 ----AD---- C:\Program Files (x86)\Seznam DVD 2011
2017-04-21 20:58:20 ----D---- C:\Windows\SYSWOW64\XPSViewer
2017-04-21 20:58:16 ----D---- C:\Program Files\Reference Assemblies
2017-04-21 20:58:16 ----D---- C:\Program Files\MSBuild
2017-04-21 20:58:16 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-04-21 20:58:16 ----D---- C:\Program Files (x86)\MSBuild
2017-04-21 20:57:07 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2017-04-21 20:57:07 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2017-04-21 20:57:07 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-04-21 20:57:05 ----A---- C:\Windows\system32\TsWpfWrp.exe
2017-04-21 20:57:05 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2017-04-21 20:57:05 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-04-21 20:53:49 ----D---- C:\Users\Rampa\AppData\Roaming\WinRAR
2017-04-21 20:18:56 ----D---- C:\Users\Rampa\AppData\Roaming\NVIDIA
2017-04-21 20:11:22 ----A---- C:\Windows\CoD.INI
2017-04-21 19:52:03 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2017-04-21 19:51:51 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2017-04-21 19:51:12 ----A---- C:\Windows\game.ini
2017-04-21 19:42:14 ----D---- C:\Users\Rampa\AppData\Roaming\Macromedia
2017-04-21 18:03:18 ----D---- C:\Program Files\KONICA MINOLTA
2017-04-21 17:48:50 ----D---- C:\ProgramData\APRP
2017-04-21 17:44:31 ----N---- C:\Windows\system32\drivers\IOMap64.sys
2017-04-21 17:13:54 ----D---- C:\ProgramData\SplitMediaLabs
2017-04-21 17:13:54 ----D---- C:\Program Files (x86)\SplitmediaLabs
2017-04-21 17:13:37 ----D---- C:\Users\Rampa\AppData\Roaming\SplitmediaLabs
2017-04-21 17:13:24 ----D---- C:\Program Files (x86)\ASUS
2017-04-21 17:13:17 ----D---- C:\Windows\Downloaded Installations
2017-04-21 17:12:29 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2017-04-21 17:12:25 ----A---- C:\Windows\system32\nvhdap64.dll
2017-04-21 17:12:25 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2017-04-21 17:12:24 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2017-04-21 17:12:24 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2017-04-21 17:12:24 ----A---- C:\Windows\system32\vulkaninfo.exe
2017-04-21 17:12:24 ----A---- C:\Windows\system32\vulkan-1.dll
2017-04-21 17:12:23 ----D---- C:\Program Files (x86)\VulkanRT
2017-04-21 17:11:23 ----A---- C:\Windows\system32\nvdispco6437563.dll
2017-04-21 17:11:22 ----A---- C:\Windows\system32\nvdispgenco6437563.dll
2017-04-21 17:09:58 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2017-04-21 17:09:58 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2017-04-21 17:09:57 ----A---- C:\Windows\system32\nvoglv64.dll
2017-04-21 17:09:55 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2017-04-21 17:09:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2017-04-21 17:09:55 ----A---- C:\Windows\system32\nvopencl.dll
2017-04-21 17:09:53 ----A---- C:\Windows\system32\nvmcumd.dll
2017-04-21 17:09:52 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2017-04-21 17:09:52 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2017-04-21 17:09:52 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2017-04-21 17:09:52 ----A---- C:\Windows\system32\NvIFR64.dll
2017-04-21 17:09:51 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2017-04-21 17:09:51 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2017-04-21 17:09:51 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2017-04-21 17:09:51 ----A---- C:\Windows\SYSWOW64\nvEncMFThevc.dll
2017-04-21 17:09:51 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\NvFBC64.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\nvEncMFThevc.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2017-04-21 17:09:51 ----A---- C:\Windows\system32\nvDecMFTMjpeg.dll
2017-04-21 17:09:50 ----A---- C:\Windows\SYSWOW64\nvDecMFTMjpeg.dll
2017-04-21 17:09:49 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2017-04-21 17:09:48 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2017-04-21 17:09:48 ----A---- C:\Windows\system32\nvcuvid.dll
2017-04-21 17:09:48 ----A---- C:\Windows\system32\nvcuda.dll
2017-04-21 17:09:25 ----A---- C:\Windows\system32\nvcompiler.dll
2017-04-21 17:09:20 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2017-04-21 17:09:20 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2017-04-21 16:33:31 ----D---- C:\Users\Rampa\AppData\Roaming\vlc
2017-04-21 16:13:44 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-04-21 16:13:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-04-21 16:13:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-04-21 16:13:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-04-21 16:13:44 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-04-21 16:13:44 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-04-21 16:13:44 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-04-21 16:13:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-04-21 16:13:43 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-04-21 16:13:42 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-04-21 16:13:42 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-04-21 16:13:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-04-21 16:13:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-04-21 16:13:41 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-04-21 16:13:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-04-21 16:13:41 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-04-21 16:13:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-04-21 16:13:41 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-04-21 16:13:41 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-04-21 16:13:40 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-04-21 16:13:40 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-04-21 16:13:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-04-21 16:13:40 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-04-21 16:13:40 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-04-21 16:13:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-04-21 16:13:39 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-04-21 16:13:38 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-04-21 16:13:38 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-04-21 16:13:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-04-21 16:13:38 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-04-21 16:13:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-04-21 16:13:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-04-21 16:13:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-04-21 16:13:37 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-04-21 16:13:36 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-04-21 16:13:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-04-21 16:13:36 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-04-21 16:13:36 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-04-21 16:13:36 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-04-21 16:13:36 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-04-21 16:13:35 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-04-21 16:13:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-04-21 16:13:35 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-04-21 16:13:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-04-21 16:13:35 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-04-21 16:13:35 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-04-21 16:13:35 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-04-21 16:13:35 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-04-21 16:13:34 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-04-21 16:13:34 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-04-21 16:13:34 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-04-21 16:13:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-04-21 16:13:34 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-04-21 16:13:34 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-04-21 16:13:34 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-04-21 16:13:34 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-04-21 16:13:33 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-04-21 16:13:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-04-21 16:13:33 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-04-21 16:13:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-04-21 16:13:33 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-04-21 16:13:33 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-04-21 16:13:33 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-04-21 16:13:33 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-04-21 16:13:32 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-04-21 16:13:32 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-04-21 16:13:32 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-04-21 16:13:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-04-21 16:13:32 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-04-21 16:13:32 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-04-21 16:13:32 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-04-21 16:13:32 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-04-21 16:13:31 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-04-21 16:13:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-04-21 16:13:31 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-04-21 16:13:31 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-04-21 16:13:30 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-04-21 16:13:30 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-04-21 16:13:30 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-04-21 16:13:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-04-21 16:13:30 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-04-21 16:13:30 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-04-21 16:13:30 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-04-21 16:13:30 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-04-21 16:13:29 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-04-21 16:13:29 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-04-21 16:13:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-04-21 16:13:29 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-04-21 16:13:29 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-04-21 16:13:29 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-04-21 16:13:28 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-04-21 16:13:28 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-04-21 16:13:27 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-04-21 16:13:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-04-21 16:13:27 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-04-21 16:13:27 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-04-21 16:13:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-04-21 16:13:27 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-04-21 16:13:27 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-04-21 16:13:27 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-04-21 16:13:27 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-04-21 16:13:27 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-04-21 16:13:26 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-04-21 16:13:26 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-04-21 16:13:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-04-21 16:13:26 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-04-21 16:13:26 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-04-21 16:13:26 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-04-21 16:13:25 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2017-04-21 16:13:25 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-04-21 16:13:25 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-04-21 16:13:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-04-21 16:13:25 ----A---- C:\Windows\system32\xinput1_3.dll
2017-04-21 16:13:25 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-04-21 16:13:25 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-04-21 16:13:25 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-04-21 16:13:24 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-04-21 16:13:24 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-04-21 16:13:24 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-04-21 16:13:24 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-04-21 16:13:23 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-04-21 16:13:23 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-04-21 16:13:23 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-04-21 16:13:23 ----A---- C:\Windows\system32\d3dx10.dll
2017-04-21 16:13:22 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-04-21 16:13:22 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-04-21 16:13:22 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-04-21 16:13:22 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-04-21 16:13:22 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-04-21 16:13:22 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-04-21 16:13:22 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-04-21 16:13:22 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-04-21 16:13:21 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-04-21 16:13:21 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-04-21 16:13:21 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-04-21 16:13:21 ----A---- C:\Windows\system32\xinput1_2.dll
2017-04-21 16:13:21 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-04-21 16:13:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-04-21 16:13:20 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-04-21 16:13:20 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-04-21 16:13:20 ----A---- C:\Windows\system32\xinput1_1.dll
2017-04-21 16:13:20 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-04-21 16:13:20 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-04-21 16:13:18 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-04-21 16:13:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-04-21 16:13:18 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-04-21 16:13:18 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-04-21 16:13:18 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-04-21 16:13:18 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-04-21 16:13:17 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-04-21 16:13:17 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-04-21 16:13:17 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-04-21 16:13:16 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-04-21 16:13:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-04-21 16:13:16 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-04-21 16:13:16 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-04-21 16:13:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-04-21 16:13:16 ----A---- C:\Windows\system32\d3dx9_24.dll
2017-04-21 16:12:45 ----D---- C:\ProgramData\Package Cache
2017-04-21 16:04:40 ----D---- C:\AdwCleaner
2017-04-21 16:02:13 ----D---- C:\Windows\system32\MRT
2017-04-21 16:02:08 ----AC---- C:\Windows\system32\MRT.exe
2017-04-21 16:02:01 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2017-04-21 16:02:00 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2017-04-21 16:02:00 ----A---- C:\Windows\system32\drivers\BasicRender.sys
2017-04-21 16:01:59 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2017-04-21 16:01:59 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-21 16:01:59 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-04-21 16:01:59 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2017-04-21 16:01:59 ----A---- C:\Windows\system32\WindowsCodecs.dll
2017-04-21 16:01:58 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-04-21 16:01:58 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2017-04-21 16:01:58 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-04-21 16:01:57 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2017-04-21 16:01:57 ----A---- C:\Windows\SYSWOW64\quartz.dll
2017-04-21 16:01:57 ----A---- C:\Windows\SYSWOW64\msIso.dll
2017-04-21 16:01:57 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2017-04-21 16:01:57 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2017-04-21 16:01:57 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2017-04-21 16:01:56 ----A---- C:\Windows\SYSWOW64\XpsDocumentTargetPrint.dll
2017-04-21 16:01:56 ----A---- C:\Windows\SYSWOW64\mfmjpegdec.dll
2017-04-21 16:01:56 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-04-21 16:01:56 ----A---- C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-04-21 16:01:50 ----A---- C:\Windows\system32\XpsPrint.dll
2017-04-21 16:01:49 ----A---- C:\Windows\system32\edgehtml.dll
2017-04-21 16:01:48 ----A---- C:\Windows\system32\mshtml.dll
2017-04-21 16:01:47 ----A---- C:\Windows\system32\Chakra.dll
2017-04-21 16:01:46 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-04-21 16:01:46 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-04-21 16:01:45 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-04-21 16:01:42 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-04-21 16:01:40 ----A---- C:\Windows\system32\msIso.dll
2017-04-21 16:01:40 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-04-21 16:01:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-04-21 16:01:38 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2017-04-21 16:01:38 ----A---- C:\Windows\system32\mfmjpegdec.dll
2017-04-21 16:01:38 ----A---- C:\Windows\system32\ieproxy.dll
2017-04-21 16:01:38 ----A---- C:\Windows\system32\ieframe.dll
2017-04-21 16:01:37 ----A---- C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-04-21 16:01:37 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-21 16:01:36 ----A---- C:\Windows\system32\win32kfull.sys
2017-04-21 16:01:36 ----A---- C:\Windows\system32\ole32.dll
2017-04-21 16:01:36 ----A---- C:\Windows\system32\gdi32full.dll
2017-04-21 16:01:35 ----A---- C:\Windows\system32\UpdateAgent.dll
2017-04-21 16:01:35 ----A---- C:\Windows\system32\quartz.dll
2017-04-21 16:01:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-04-21 16:01:35 ----A---- C:\Windows\system32\fontdrvhost.exe
2017-04-21 16:01:35 ----A---- C:\Windows\system32\browserbroker.dll
2017-04-21 16:01:35 ----A---- C:\Windows\system32\audiosrv.dll
2017-04-21 16:01:35 ----A---- C:\Windows\system32\atmfd.dll
2017-04-21 16:01:34 ----A---- C:\Windows\system32\securekernel.exe
2017-04-21 16:01:34 ----A---- C:\Windows\system32\hvix64.exe
2017-04-21 16:01:34 ----A---- C:\Windows\system32\hvax64.exe
2017-04-21 16:01:34 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2017-04-21 16:01:34 ----A---- C:\Windows\system32\atmlib.dll
2017-04-21 16:01:34 ----A---- C:\Windows\system32\asycfilt.dll
2017-04-21 15:59:44 ----A---- C:\Windows\ODBC.INI
2017-04-21 15:59:06 ----D---- C:\Program Files (x86)\Microsoft Works
2017-04-21 15:59:04 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2017-04-21 15:59:02 ----D---- C:\Windows\SHELLNEW
2017-04-21 15:59:01 ----D---- C:\Windows\PCHEALTH
2017-04-21 15:59:00 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-04-21 15:56:31 ----D---- C:\Users\Rampa\AppData\Roaming\Ahead
2017-04-21 15:56:27 ----D---- C:\ProgramData\Ahead
2017-04-21 15:54:53 ----D---- C:\Program Files (x86)\Nero
2017-04-21 15:54:53 ----AD---- C:\ProgramData\Nero
2017-04-21 15:54:09 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-04-21 15:54:09 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-04-21 15:46:44 ----AD---- C:\Program Files\WinRAR
2017-04-21 15:42:12 ----D---- C:\Program Files (x86)\Steam
2017-04-21 15:29:04 ----D---- C:\Hry
2017-04-21 14:57:20 ----D---- C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy
2017-04-21 14:57:20 ----D---- C:\Program Files (x86)\Refaghtreiceied Log
2017-04-21 14:57:19 ----D---- C:\Users\Rampa\AppData\Roaming\Profiles
2017-04-21 14:57:19 ----D---- C:\Program Files (x86)\Lerjale
2017-04-21 14:57:11 ----A---- C:\Windows\system32\drivers\dtliteusbbus.sys
2017-04-21 14:57:06 ----D---- C:\Users\Rampa\AppData\Roaming\DAEMON Tools Lite
2017-04-21 14:57:06 ----A---- C:\Windows\system32\drivers\dtlitescsibus.sys
2017-04-21 14:57:02 ----D---- C:\Program Files\DAEMON Tools Lite
2017-04-21 14:56:43 ----D---- C:\ProgramData\DAEMON Tools Lite
2017-04-21 14:56:29 ----D---- C:\Program Files\VideoLAN
2017-04-21 14:54:46 ----D---- C:\Users\Rampa\AppData\Roaming\Google
2017-04-21 14:53:37 ----D---- C:\ProgramData\Adobe
2017-04-21 14:52:39 ----D---- C:\Program Files (x86)\Adobe
2017-04-21 14:52:22 ----D---- C:\Program Files (x86)\Google
2017-04-21 14:20:49 ----D---- C:\Zaloha
2017-04-21 13:10:07 ----N---- C:\Windows\system32\MpSigStub.exe
2017-04-21 11:57:06 ----D---- C:\Windows\Panther
2017-04-21 11:17:47 ----D---- C:\Windows\system32\DAX3
2017-04-21 11:17:47 ----D---- C:\Windows\system32\DAX2
2017-04-21 11:17:47 ----D---- C:\ProgramData\Audyssey Labs
2017-04-21 11:17:43 ----D---- C:\Windows\SYSWOW64\RTCOM
2017-04-21 11:17:43 ----D---- C:\Program Files\Realtek
2017-04-21 11:17:21 ----A---- C:\Windows\system32\YamahaAE3.dll
2017-04-21 11:17:21 ----A---- C:\Windows\system32\YamahaAE2.dll
2017-04-21 11:17:20 ----A---- C:\Windows\system32\YamahaAE.dll
2017-04-21 11:17:20 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2017-04-21 11:17:20 ----A---- C:\Windows\system32\tossaeapo64.dll
2017-04-21 11:17:20 ----A---- C:\Windows\system32\toseaeapo64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\tosasfapo64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\tosade.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\tepeqapo64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\tadefxapo264.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\tadefxapo.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRSWOW64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRSTSX64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRSTSH64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRSHP64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRRPTR64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRCOM64.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRCOM.dll
2017-04-21 11:17:19 ----A---- C:\Windows\system32\SRAPO64.dll
2017-04-21 11:17:18 ----A---- C:\Windows\system32\sltech64.dll
2017-04-21 11:17:18 ----A---- C:\Windows\system32\slprp64.dll
2017-04-21 11:17:17 ----A---- C:\Windows\system32\slcnt64.dll
2017-04-21 11:17:17 ----A---- C:\Windows\system32\sl3apo64.dll
2017-04-21 11:17:17 ----A---- C:\Windows\system32\SFSS_APO.dll
2017-04-21 11:17:17 ----A---- C:\Windows\system32\SFNHK64.dll
2017-04-21 11:17:16 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2017-04-21 11:17:16 ----A---- C:\Windows\SYSWOW64\SEHDHF32.dll
2017-04-21 11:17:16 ----A---- C:\Windows\SYSWOW64\SECOMN32.dll
2017-04-21 11:17:16 ----A---- C:\Windows\system32\SFCOM64.dll
2017-04-21 11:17:16 ----A---- C:\Windows\system32\SFAPO64.dll
2017-04-21 11:17:16 ----A---- C:\Windows\system32\SEHDRA64.dll
2017-04-21 11:17:16 ----A---- C:\Windows\system32\SEHDHF64.dll
2017-04-21 11:17:16 ----A---- C:\Windows\system32\SECOMN64.dll
2017-04-21 11:17:15 ----A---- C:\Windows\system32\SEAPO64.dll
2017-04-21 11:17:15 ----A---- C:\Windows\system32\RtPgEx64.dll
2017-04-21 11:17:15 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2017-04-21 11:17:15 ----A---- C:\Windows\system32\drivers\rtvienna.dat
2017-04-21 11:17:14 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2017-04-21 11:17:14 ----A---- C:\Windows\system32\RtkCfg64.dll
2017-04-21 11:17:14 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RtkApi64.dll
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RTEEP64A.dll
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RTEEL64A.dll
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RTEEG64A.dll
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RTEED64A.dll
2017-04-21 11:17:13 ----A---- C:\Windows\system32\RtDataProc64.dll
2017-04-21 11:17:12 ----A---- C:\Windows\system32\RTCOM64.dll
2017-04-21 11:17:11 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2017-04-21 11:17:11 ----A---- C:\Windows\system32\RP3DHT64.dll
2017-04-21 11:17:11 ----A---- C:\Windows\system32\RP3DAA64.dll
2017-04-21 11:17:11 ----A---- C:\Windows\system32\RltkAPO64.dll
2017-04-21 11:17:11 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2017-04-21 11:17:09 ----A---- C:\Windows\system32\RCoRes64.dat
2017-04-21 11:17:09 ----A---- C:\Windows\system32\RCoInstII64.dll
2017-04-21 11:17:08 ----A---- C:\Windows\system32\R4EEP64A.dll
2017-04-21 11:17:07 ----A---- C:\Windows\system32\R4EEL64A.dll
2017-04-21 11:17:07 ----A---- C:\Windows\system32\R4EEG64A.dll
2017-04-21 11:17:07 ----A---- C:\Windows\system32\R4EED64A.dll
2017-04-21 11:17:07 ----A---- C:\Windows\system32\R4EEA64A.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\ICEsoundAPO64.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMUI.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMLimiter.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMHVS.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMEQ_Voice.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMEQ.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMClariFi.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HMAPO.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HiFiDAX2APIPCLL.dll
2017-04-21 11:17:06 ----A---- C:\Windows\system32\HiFiDAX2API.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\HarmanAudioInterface.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-04-21 11:17:02 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-04-21 11:17:01 ----A---- C:\Windows\system32\DolbyDAX2APOvlldp.dll
2017-04-21 11:17:00 ----A---- C:\Windows\system32\DolbyDAX2APOv211.dll
2017-04-21 11:17:00 ----A---- C:\Windows\system32\DolbyDAX2APOv201.dll
2017-04-21 11:17:00 ----A---- C:\Windows\system32\DolbyDAX2APOProp.dll
2017-04-21 11:17:00 ----A---- C:\Windows\system32\DDPP64AF3.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPP64A.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPO64AF3.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPO64A.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPD64AF3.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPD64A.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPA64F3.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DDPA64.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DAX3APOv251.dll
2017-04-21 11:16:59 ----A---- C:\Windows\system32\DAX3APOProp.dll
2017-04-21 11:16:58 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-04-21 11:16:57 ----A---- C:\Windows\system32\AudysseyEfx.dll
2017-04-21 11:16:57 ----A---- C:\Windows\system32\audioLibVc.dll
2017-04-21 11:16:56 ----D---- C:\Program Files (x86)\Realtek
2017-04-21 11:16:56 ----A---- C:\Windows\system32\AcpiServiceVnA64.dll
2017-04-21 11:16:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-04-21 11:16:49 ----HD---- C:\Program Files (x86)\Temp
2017-04-21 11:16:49 ----A---- C:\Windows\RtlExUpd.dll
2017-04-21 11:12:23 ----D---- C:\ProgramData\USOShared
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nvsvcr.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nvsvc64.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nvshext.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nvmctray.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nvcpl.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nv3dappshextr.dll
2017-04-21 11:12:04 ----A---- C:\Windows\system32\nv3dappshext.dll
2017-04-21 11:11:52 ----D---- C:\ProgramData\NVIDIA
2017-04-21 11:11:52 ----A---- C:\Windows\NvContainerRecovery.bat
2017-04-21 11:11:50 ----A---- C:\Windows\system32\OpenCL.dll
2017-04-21 11:11:39 ----D---- C:\ProgramData\NVIDIA Corporation
2017-04-21 11:11:37 ----D---- C:\Program Files\NVIDIA Corporation
2017-04-21 11:11:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-04-21 11:09:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-04-21 11:06:45 ----D---- C:\ProgramData\Microsoft OneDrive
2017-04-21 11:05:06 ----D---- C:\Users\Rampa\AppData\Roaming\Adobe
2017-04-21 11:04:45 ----SD---- C:\Users\Rampa\AppData\Roaming\Microsoft
2017-04-21 11:04:00 ----D---- C:\Windows\CSC
2017-04-21 11:03:57 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2017-04-21 11:03:47 ----D---- C:\Windows\SoftwareDistribution
2017-04-21 11:02:25 ----SHD---- C:\Recovery
2017-04-21 11:02:12 ----SHD---- C:\ProgramData\Šablony
2017-04-21 11:02:12 ----SHD---- C:\ProgramData\Plocha
2017-04-21 11:02:12 ----SHD---- C:\ProgramData\Nabídka Start
2017-04-21 11:02:12 ----SHD---- C:\ProgramData\Dokumenty
2017-04-21 11:02:12 ----SHD---- C:\ProgramData\Data aplikací
2017-04-21 11:02:12 ----SHD---- C:\Documents and Settings
2017-04-21 11:01:52 ----ASH---- C:\hiberfil.sys
2017-04-21 10:58:37 ----HD---- C:\Program Files\Uninstall Information
2017-04-21 10:58:36 ----AS---- C:\Windows\bootstat.dat
2017-04-21 10:58:10 ----D---- C:\Windows\Prefetch
2017-04-21 10:57:47 ----D---- C:\Windows\system32\SleepStudy
2017-04-21 10:57:47 ----D---- C:\Windows\ServiceProfiles
2017-04-21 10:57:45 ----SD---- C:\Windows\system32\Microsoft
2017-04-21 10:57:43 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-04-21 10:57:39 ----ASH---- C:\swapfile.sys
2017-04-21 10:57:38 ----ASH---- C:\pagefile.sys
2017-04-21 10:57:37 ----SHD---- C:\System Volume Information

====== List of files/folders modified in the last 1 month ======

2017-04-23 14:11:55 ----RD---- C:\Program Files
2017-04-23 14:11:50 ----D---- C:\Windows\Temp
2017-04-23 14:05:19 ----D---- C:\Windows\Logs
2017-04-23 14:05:19 ----D---- C:\Windows\INF
2017-04-23 14:05:19 ----D---- C:\Windows\debug
2017-04-23 14:05:19 ----D---- C:\Windows
2017-04-23 14:02:20 ----D---- C:\Windows\system32\Tasks
2017-04-23 13:58:41 ----D---- C:\Windows\system32\sru
2017-04-22 20:24:40 ----D---- C:\Windows\System32
2017-04-22 16:39:19 ----D---- C:\Windows\system32\NDF
2017-04-22 14:24:59 ----RD---- C:\Program Files (x86)
2017-04-22 14:24:58 ----SHD---- C:\Windows\Installer
2017-04-22 12:42:42 ----D---- C:\Windows\system32\DriverStore
2017-04-22 12:42:29 ----D---- C:\Windows\system32\LogFiles
2017-04-22 12:42:28 ----RD---- C:\Windows\Microsoft.NET
2017-04-22 11:49:28 ----HD---- C:\Program Files\WindowsApps
2017-04-22 11:48:58 ----D---- C:\Windows\AppReadiness
2017-04-22 07:27:08 ----D---- C:\Windows\system32\WinBioDatabase
2017-04-22 07:23:43 ----D---- C:\Windows\appcompat
2017-04-21 22:44:23 ----D---- C:\Program Files\Common Files
2017-04-21 22:40:37 ----D---- C:\Windows\system32\catroot2
2017-04-21 22:37:41 ----D---- C:\Windows\system32\drivers
2017-04-21 22:36:29 ----HD---- C:\ProgramData
2017-04-21 22:32:31 ----D---- C:\Windows\system32\config
2017-04-21 21:43:17 ----RD---- C:\Windows\assembly
2017-04-21 21:25:06 ----D---- C:\Windows\WinSxS
2017-04-21 20:58:20 ----D---- C:\Windows\SYSWOW64\MUI
2017-04-21 20:58:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-04-21 20:58:20 ----D---- C:\Windows\SysWOW64
2017-04-21 20:58:20 ----D---- C:\Windows\system32\MUI
2017-04-21 20:58:20 ----D---- C:\Windows\system32\cs-CZ
2017-04-21 20:58:16 ----RSD---- C:\Windows\Fonts
2017-04-21 20:56:38 ----D---- C:\Windows\CbsTemp
2017-04-21 19:56:28 ----SD---- C:\ProgramData\Microsoft
2017-04-21 17:13:17 ----D---- C:\Program Files (x86)\Common Files
2017-04-21 15:59:31 ----A---- C:\Windows\win.ini
2017-04-21 15:59:16 ----D---- C:\Windows\IME
2017-04-21 15:59:02 ----D---- C:\Windows\Help
2017-04-21 15:59:01 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-04-21 15:57:55 ----D---- C:\Windows\System
2017-04-21 15:42:11 ----D---- C:\Windows\system32\WDI
2017-04-21 15:40:33 ----SHD---- C:\$Recycle.Bin
2017-04-21 11:21:43 ----RD---- C:\Users
2017-04-21 11:12:49 ----D---- C:\Windows\system32\CodeIntegrity
2017-04-21 11:12:24 ----D---- C:\ProgramData\USOPrivate
2017-04-21 11:06:16 ----D---- C:\Windows\system32\wbem
2017-04-21 11:05:55 ----D---- C:\Windows\system32\restore
2017-04-21 11:04:01 ----D---- C:\Windows\system32\spool
2017-04-21 11:04:00 ----D---- C:\Windows\system32\FxsTmp
2017-04-21 11:03:54 ----D---- C:\Windows\rescache
2017-04-21 11:02:49 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-04-21 11:02:12 ----D---- C:\Program Files\Windows NT
2017-04-21 11:01:10 ----D---- C:\Windows\system32\Recovery
2017-04-21 11:01:02 ----D---- C:\Windows\system32\Sysprep
2017-04-21 10:59:05 ----RD---- C:\Windows\PrintDialog
2017-04-21 10:59:05 ----RD---- C:\Windows\MiracastView
2017-04-21 10:59:04 ----RD---- C:\Windows\ImmersiveControlPanel
2017-04-21 10:58:46 ----D---- C:\Windows\HoloShell
2017-04-21 10:58:28 ----D---- C:\Windows\system32\drivers\UMDF
2017-04-21 10:58:05 ----D---- C:\Windows\Tasks
2017-04-03 18:56:16 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2017-03-18 49568]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;@oem26.inf,%EpfwLWF_Desc%;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2017-03-18 14336]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R3 dtlitescsibus;@oem15.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2017-04-21 30264]
R3 dtliteusbbus;@oem16.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\Windows\System32\drivers\dtliteusbbus.sys [2017-04-21 47672]
R3 iaLPSS2_UART2;@oem3.inf,%iaLPSS2_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\Windows\System32\drivers\iaLPSS2_UART2.sys [2016-10-26 287032]
R3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_49b226e6441043f1\nvlddmkm.sys [2016-10-23 14145592]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2017-03-18 604160]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2017-03-18 91040]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2017-03-20 127904]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2017-03-20 161696]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2017-03-20 143776]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2017-03-18 53664]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2017-03-20 230816]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 netvsc;netvsc; C:\Windows\System32\drivers\netvsc.sys [2017-03-18 119296]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\Windows\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 NVHDA;@oem18.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-10-22 212936]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFS;ReFS; C:\Windows\system32\drivers\ReFS.sys [2017-03-18 1735584]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\Windows\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2017-03-20 125952]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\Windows\System32\Drivers\UcmTcpciCx.sys [2017-03-18 179200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 CDPUserSvc_5f3a93;Uživatelská služba platformy připojených zařízení_5f3a93; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\dusmsvc.dll
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2016-10-22 458176]
R2 OneSyncSvc_5f3a93;Hostitel synchronizace_5f3a93; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2017-04-21 66872]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2017-03-18 335808]
R3 PimIndexMaintenanceSvc_5f3a93;Data kontaktů_5f3a93; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\TokenBroker.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\DevicesFlowBroker.dll
S3 DevicesFlowUserSvc_5f3a93;Tok zařízení_5f3a93; C:\Windows\system32\svchost.exe -k DevicesFlow;"ServiceDll" =
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2017-02-07 1471168]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\IpxlatCfg.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_5f3a93;Služba zasílání zpráv_5f3a93; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\NaturalAuth.dll
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalService;"ServiceDll" = %SystemRoot%\system32\SEMgrSvc.dll
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2017-03-20 3913064]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\Windows\system32\spectrum.exe [2017-03-18 891904]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-03-23 1590560]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2017-03-20 846752]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Provedeno

# AdwCleaner v6.045 - Log vytvořen 24/04/2017 v 19:50:15
# Aktualizováno dne 28/03/2017 z Malwarebytes
# Databáze : 2017-04-24.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : Rampa - RAMPA
# Spuštěno z : C:\Users\Rampa\Downloads\adwcleaner_6.045.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKU\.DEFAULT\Software\ecb`nl
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\ecb`nl
[-] Klíč smazán: HKLM\SOFTWARE\ecb`nl
[-] Klíč smazán: HKLM\SOFTWARE\{84416237-6490-494D-9AD6-4994DD978971}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\ecb`nl


***** [ Prohlížeče ] *****

[-] [C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData] [startup_urls] Smazáno: hxxp://www.initialpage123.com/?z=f4961cdbd0d23 ... 6X&type=hp
[-] [C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData] [startup_urls] Smazáno: hxxp://www.initialpage123.com/?z=b7267f26d5139 ... 6X&type=hp


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2132 Bajty] - [21/04/2017 16:08:26]
C:\AdwCleaner\AdwCleaner[C2].txt - [1615 Bajty] - [24/04/2017 19:50:15]
C:\AdwCleaner\AdwCleaner[S0].txt - [2212 Bajty] - [21/04/2017 16:05:28]
C:\AdwCleaner\AdwCleaner[S1].txt - [2091 Bajty] - [24/04/2017 19:49:47]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1834 Bajty] ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=30&t=133101 .

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-04-2017 01
Ran by Rampa (administrator) on RAMPA (24-04-2017 20:09:02)
Running from C:\Users\Rampa\Desktop
Loaded Profiles: Rampa (Available Profiles: Rampa)
Platform: Windows 10 Pro Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\System32\SecurityHealthService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler64.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-03-30] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-07] (Disc Soft Ltd)
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9532120 2017-04-11] (Piriform Ltd)
HKLM\...\Providers\zowvcwal: C:\Program Files (x86)\Refaghtreiceied Log\local64spl.dll
ShellExecuteHooks: No Name - {8AA48C46-2346-11E7-AFEB-64006A5CFC23} - C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy\Arejole.dll [147456 2017-04-21] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk [2017-04-21]
ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{9d20a661-781f-4e78-af9a-51f7498b29f3}: [NameServer] 8.8.8.8,109.238.32.52

Internet Explorer:
==================
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14] (Adobe Systems Incorporated)

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-21] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR HomePage: ChromeDefaultData -> hxxp://google.cz/
CHR StartupUrls: ChromeDefaultData -> "hxxp://www.seznam.cz/","hxxps://accounts.googl ... 6X&type=hp"
CHR Session Restore: ChromeDefaultData -> is enabled.
CHR Profile: C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-04-24] <==== ATTENTION
CHR Extension: (Prezentace Google) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-04-21]
CHR Extension: (Dokumenty Google) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2017-04-21]
CHR Extension: (Disk Google) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-21]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2017-04-21]
CHR Extension: (YouTube) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-21]
CHR Extension: (Adblock na Youtube™) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2017-04-21]
CHR Extension: (Tabulky Google) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-21]
CHR Extension: (AdBlock) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-21]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2017-04-23]
CHR Extension: (Gmail) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-21]
CHR Extension: (Chrome Media Router) - C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-21]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-07] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-22] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2017-04-21] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
S3 wlpasvc; C:\Windows\System32\lpasvc.dll [1295360 2017-03-18] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-04-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-04-21] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-10-10] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169280 2014-10-10] (ESET)
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [222280 2014-10-10] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [44632 2014-10-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-10-10] (ESET)
S3 iaLPSS2i_GPIO2_BXT_P; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [85504 2017-03-18] (Intel Corporation)
S3 iaLPSS2i_I2C_BXT_P; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [168448 2017-03-18] (Intel Corporation)
R3 iaLPSS2_UART2; C:\Windows\System32\drivers\iaLPSS2_UART2.sys [287032 2016-10-26] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_49b226e6441043f1\nvlddmkm.sys [14145592 2016-10-23] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVCx32: TokenBroker -> C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-24 20:09 - 2017-04-24 20:09 - 00012095 _____ C:\Users\Rampa\Desktop\FRST.txt
2017-04-24 20:08 - 2017-04-24 20:09 - 00000000 ____D C:\FRST
2017-04-24 20:05 - 2017-04-24 20:05 - 02426368 _____ (Farbar) C:\Users\Rampa\Desktop\FRST64.exe
2017-04-24 19:48 - 2017-04-24 19:48 - 04089296 _____ C:\Users\Rampa\Downloads\adwcleaner_6.045.exe
2017-04-24 13:54 - 2017-04-24 13:54 - 00000000 ____D C:\Users\Rampa\AppData\Local\Logitech
2017-04-24 13:52 - 2017-04-24 13:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-04-24 13:52 - 2017-04-24 13:52 - 00000000 ____D C:\Program Files\Logitech
2017-04-24 13:52 - 2017-04-24 13:52 - 00000000 ____D C:\Program Files\Common Files\Logitech
2017-04-24 12:32 - 2017-04-24 12:32 - 00000222 _____ C:\Users\Rampa\Desktop\Alien Isolation.url
2017-04-23 22:38 - 2017-04-23 23:58 - 1416918882 _____ C:\Users\Rampa\Downloads\Rambo-1-=1982-Akční-DVD-CZ.avi
2017-04-23 21:27 - 2017-04-23 21:27 - 00000000 ____D C:\Users\Rampa\AppData\Local\Adobe
2017-04-23 18:43 - 2016-08-23 04:19 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2017-04-23 14:11 - 2017-04-23 14:12 - 00000000 ____D C:\rsit
2017-04-23 14:11 - 2017-04-23 14:12 - 00000000 ____D C:\Program Files\trend micro
2017-04-23 14:08 - 2017-04-23 14:10 - 00029696 _____ C:\Users\Rampa\AppData\Local\MSGBOX.EXE
2017-04-23 14:02 - 2017-04-23 14:02 - 00002850 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-04-23 14:02 - 2017-04-23 14:02 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-04-23 14:02 - 2017-04-23 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-04-23 14:02 - 2017-04-23 14:02 - 00000000 ____D C:\Program Files\CCleaner
2017-04-22 21:56 - 2017-04-22 21:56 - 00002210 _____ C:\Users\Rampa\Desktop\3D Vision Photo Viewer.lnk
2017-04-22 20:04 - 2017-04-22 20:04 - 00000000 ____D C:\Users\Rampa\AppData\Local\SniperV2
2017-04-22 20:03 - 2017-04-22 20:03 - 00000000 ____D C:\Users\Rampa\AppData\Local\SKIDROW
2017-04-22 20:02 - 2017-04-22 20:02 - 00001765 _____ C:\Users\Public\Desktop\Sniper Elite V2.lnk
2017-04-22 20:02 - 2017-04-22 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rebellion
2017-04-22 14:25 - 2017-04-22 14:25 - 00000000 ____D C:\Users\Rampa\AppData\LocalLow\Google
2017-04-22 14:24 - 2017-04-22 14:24 - 00002249 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2017-04-22 14:24 - 2017-04-22 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro
2017-04-22 12:05 - 2017-04-22 12:05 - 00000581 _____ C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FILMY Download.lnk
2017-04-22 12:05 - 2017-04-22 12:05 - 00000569 _____ C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Download.lnk
2017-04-22 11:59 - 2017-04-22 12:00 - 00000783 _____ C:\Users\Rampa\Desktop\Start Tor Browser.lnk
2017-04-22 11:59 - 2017-04-22 11:59 - 00000000 ____D C:\Tor Browser
2017-04-22 07:34 - 2017-04-22 07:34 - 00002235 _____ C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite.lnk
2017-04-21 22:44 - 2017-04-21 22:44 - 00003468 _____ C:\Windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2017-04-21 22:44 - 2017-04-21 22:44 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-21 22:39 - 2017-04-21 22:39 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\ESET
2017-04-21 22:39 - 2017-04-21 22:39 - 00000000 ____D C:\Users\Rampa\AppData\Local\ESET
2017-04-21 22:36 - 2017-04-21 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-04-21 22:36 - 2017-04-21 22:36 - 00000000 ____D C:\ProgramData\ESET
2017-04-21 22:36 - 2017-04-21 22:36 - 00000000 ____D C:\Program Files\ESET
2017-04-21 22:17 - 2017-04-21 22:17 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-04-21 22:16 - 2017-04-24 00:26 - 00000000 ____D C:\Users\Rampa\AppData\Local\JDownloader 2.0
2017-04-21 22:12 - 2017-04-21 22:12 - 00001334 _____ C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Seznam DVD 2011.lnk
2017-04-21 22:03 - 2017-04-21 22:11 - 00000000 ____D C:\ProgramData\Seznam DVD 2011
2017-04-21 22:03 - 2017-04-21 22:10 - 00000000 ____D C:\Users\Rampa\Documents\Seznam DVD 2011
2017-04-21 22:03 - 2017-04-21 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seznam DVD 2011
2017-04-21 22:03 - 2017-04-21 22:03 - 00000000 ____D C:\Program Files (x86)\Seznam DVD 2011
2017-04-21 20:59 - 2017-04-21 20:59 - 00000000 ____D C:\Users\Rampa\AppData\Local\UnrealEngine
2017-04-21 20:59 - 2017-04-21 20:59 - 00000000 ____D C:\Users\Rampa\AppData\Local\THG_DEMO_2
2017-04-21 20:58 - 2017-04-21 20:58 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-04-21 20:58 - 2017-04-21 20:58 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-04-21 20:58 - 2017-04-21 20:58 - 00000000 ____D C:\Program Files\MSBuild
2017-04-21 20:58 - 2017-04-21 20:58 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-04-21 20:58 - 2017-04-21 20:58 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-04-21 20:57 - 2017-02-10 11:26 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-04-21 20:57 - 2017-02-10 11:26 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-04-21 20:57 - 2017-02-10 11:26 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-04-21 20:57 - 2017-02-10 11:21 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2017-04-21 20:57 - 2017-02-10 11:21 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-04-21 20:57 - 2017-02-10 11:21 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-04-21 20:53 - 2017-04-21 20:53 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\WinRAR
2017-04-21 20:20 - 2017-04-21 20:20 - 00000000 ____D C:\Users\Rampa\AppData\Local\PunkBuster
2017-04-21 20:18 - 2017-04-21 20:18 - 00000738 _____ C:\Users\Rampa\Desktop\Call of Duty Multiplayer.lnk
2017-04-21 20:18 - 2017-04-21 20:18 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\NVIDIA
2017-04-21 20:18 - 2017-04-21 20:18 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty
2017-04-21 20:11 - 2017-04-21 20:18 - 00000725 _____ C:\Windows\CoD.INI
2017-04-21 19:56 - 2017-04-24 12:23 - 00000000 ____D C:\Users\Rampa\AppData\Local\CrashDumps
2017-04-21 19:56 - 2017-04-21 19:56 - 00001527 _____ C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) Multiplayer.lnk
2017-04-21 19:56 - 2017-04-21 19:56 - 00000000 ____D C:\Users\Rampa\AppData\Local\DBG
2017-04-21 19:52 - 2017-04-21 20:20 - 00103736 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-04-21 19:51 - 2017-04-21 20:20 - 00066872 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2017-04-21 19:51 - 2017-04-21 19:51 - 00000304 _____ C:\Windows\game.ini
2017-04-21 19:51 - 2017-04-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision
2017-04-21 19:42 - 2017-04-21 19:42 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Macromedia
2017-04-21 18:03 - 2017-04-21 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KONICA MINOLTA
2017-04-21 18:03 - 2017-04-21 18:03 - 00000000 ____D C:\Program Files\KONICA MINOLTA
2017-04-21 17:48 - 2017-04-21 17:48 - 00000000 ____D C:\ProgramData\APRP
2017-04-21 17:44 - 2014-10-23 23:57 - 00024824 ____N (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2017-04-21 17:14 - 2017-04-21 17:14 - 00003150 _____ C:\Windows\System32\Tasks\AURA
2017-04-21 17:14 - 2017-04-21 17:14 - 00000938 _____ C:\Users\Public\Desktop\AURA(GRAPHICS CARD).lnk
2017-04-21 17:13 - 2017-04-21 17:14 - 00000000 ____D C:\Program Files (x86)\ASUS
2017-04-21 17:13 - 2017-04-21 17:13 - 00001291 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk
2017-04-21 17:13 - 2017-04-21 17:13 - 00001140 _____ C:\Users\Public\Desktop\ASUS GPU TweakII.lnk
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\Windows\System32\Tasks\ASUS
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\Windows\Downloaded Installations
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\SplitmediaLabs
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-04-21 17:13 - 2017-04-21 17:13 - 00000000 ____D C:\Program Files (x86)\SplitmediaLabs
2017-04-21 17:12 - 2017-04-21 17:12 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-04-21 17:12 - 2016-10-22 10:41 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-04-21 17:12 - 2016-10-22 10:41 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-04-21 17:12 - 2016-10-22 07:22 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-04-21 17:12 - 2016-09-09 20:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-04-21 17:12 - 2016-09-09 20:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2017-04-21 17:12 - 2016-09-09 20:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-04-21 17:12 - 2016-09-09 20:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2017-04-21 17:11 - 2016-10-22 09:25 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437563.dll
2017-04-21 17:11 - 2016-10-22 09:25 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437563.dll
2017-04-21 17:11 - 2016-10-22 09:25 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-04-21 17:11 - 2016-10-22 09:25 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-04-21 17:09 - 2016-10-22 09:25 - 40125496 _____ C:\Windows\system32\nvcompiler.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 35224120 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 34707392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 28199992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 10910184 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 10782256 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 10332336 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 09119792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 08912488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 08723456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 03465312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 02941496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 02574272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 01038392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00974784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00944184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00894400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00683824 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00642392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00573072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-04-21 17:09 - 2016-10-22 09:25 - 00327408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-04-21 16:33 - 2017-04-24 19:48 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\vlc
2017-04-21 16:13 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2017-04-21 16:13 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2017-04-21 16:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2017-04-21 16:13 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2017-04-21 16:13 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2017-04-21 16:13 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-04-21 16:13 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-04-21 16:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-04-21 16:13 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-04-21 16:13 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-04-21 16:13 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-04-21 16:13 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-04-21 16:13 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-04-21 16:13 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-04-21 16:13 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-04-21 16:13 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-04-21 16:13 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-04-21 16:13 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-04-21 16:13 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-04-21 16:13 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-04-21 16:13 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-04-21 16:13 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-04-21 16:13 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-04-21 16:13 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-04-21 16:13 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-04-21 16:13 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-04-21 16:13 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-04-21 16:13 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-04-21 16:13 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-04-21 16:13 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-04-21 16:13 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-04-21 16:13 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-04-21 16:13 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-04-21 16:13 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-04-21 16:13 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-04-21 16:13 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-04-21 16:13 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-04-21 16:13 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-04-21 16:13 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-04-21 16:13 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-04-21 16:13 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-04-21 16:13 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-04-21 16:13 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-04-21 16:13 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-04-21 16:13 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-04-21 16:13 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-04-21 16:13 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-04-21 16:13 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-04-21 16:13 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-04-21 16:13 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-04-21 16:13 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-04-21 16:13 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-04-21 16:13 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-04-21 16:13 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-04-21 16:13 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-04-21 16:13 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-04-21 16:13 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-04-21 16:13 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-04-21 16:13 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-04-21 16:13 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-04-21 16:13 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-04-21 16:13 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-04-21 16:13 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-04-21 16:13 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-04-21 16:13 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-04-21 16:13 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-04-21 16:13 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2017-04-21 16:13 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-04-21 16:13 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-04-21 16:13 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-04-21 16:13 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-04-21 16:13 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-04-21 16:13 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-04-21 16:13 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-04-21 16:13 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-04-21 16:13 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-04-21 16:13 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-04-21 16:13 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-04-21 16:13 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-04-21 16:13 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-04-21 16:13 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-04-21 16:13 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-04-21 16:13 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-04-21 16:13 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-04-21 16:13 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2017-04-21 16:13 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-04-21 16:13 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-04-21 16:13 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-04-21 16:13 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-04-21 16:13 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-04-21 16:13 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-04-21 16:13 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-04-21 16:13 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-04-21 16:13 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-04-21 16:13 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-04-21 16:13 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-04-21 16:13 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-04-21 16:13 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-04-21 16:13 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-04-21 16:13 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-04-21 16:13 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-04-21 16:13 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-04-21 16:13 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-04-21 16:13 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-04-21 16:13 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-04-21 16:13 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-04-21 16:13 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-04-21 16:13 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-04-21 16:13 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-04-21 16:13 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-04-21 16:13 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-04-21 16:13 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-04-21 16:13 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-04-21 16:12 - 2017-04-21 20:56 - 00000000 ____D C:\ProgramData\Package Cache
2017-04-21 16:11 - 2017-04-21 16:11 - 00000000 ____D C:\Users\Rampa\AppData\Local\Ahead
2017-04-21 16:08 - 2017-04-21 16:08 - 00000000 ____D C:\Users\Rampa\AppData\Local\PeerDistRepub
2017-04-21 16:07 - 2017-04-21 16:07 - 00000000 ____D C:\Users\Rampa\AppData\Local\Kholat
2017-04-21 16:04 - 2017-04-24 19:50 - 00000000 ____D C:\AdwCleaner
2017-04-21 16:02 - 2017-04-21 16:03 - 00000000 ____D C:\Windows\system32\MRT
2017-04-21 16:02 - 2017-04-21 16:02 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-21 16:02 - 2017-04-01 02:03 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-04-21 16:02 - 2017-04-01 02:01 - 00429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-04-21 16:02 - 2017-04-01 01:56 - 01060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-04-21 16:02 - 2017-03-25 09:58 - 00388000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-04-21 16:01 - 2017-04-01 03:05 - 01604312 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-04-21 16:01 - 2017-04-01 03:05 - 00750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-04-21 16:01 - 2017-04-01 03:04 - 01147296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-04-21 16:01 - 2017-04-01 03:04 - 01024416 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-04-21 16:01 - 2017-04-01 03:04 - 00382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-21 16:01 - 2017-04-01 02:59 - 08319392 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-21 16:01 - 2017-04-01 02:57 - 01411640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-04-21 16:01 - 2017-04-01 02:57 - 00626520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-04-21 16:01 - 2017-04-01 02:57 - 00311192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-21 16:01 - 2017-04-01 02:52 - 02444184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-21 16:01 - 2017-04-01 02:52 - 00409504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-21 16:01 - 2017-04-01 02:51 - 05477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-04-21 16:01 - 2017-04-01 02:51 - 01760264 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-21 16:01 - 2017-04-01 02:51 - 00205728 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-04-21 16:01 - 2017-04-01 02:50 - 02085280 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2017-04-21 16:01 - 2017-04-01 02:48 - 07904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-21 16:01 - 2017-04-01 02:47 - 01323880 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-21 16:01 - 2017-04-01 02:29 - 01518088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-21 16:01 - 2017-04-01 02:28 - 00354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-04-21 16:01 - 2017-04-01 02:25 - 06756920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-21 16:01 - 2017-04-01 02:25 - 00986592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-21 16:01 - 2017-04-01 02:19 - 23675392 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-04-21 16:01 - 2017-04-01 02:11 - 02957824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-04-21 16:01 - 2017-04-01 02:11 - 00038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-21 16:01 - 2017-04-01 02:09 - 20505600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-04-21 16:01 - 2017-04-01 02:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-04-21 16:01 - 2017-04-01 02:08 - 19334144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-21 16:01 - 2017-04-01 02:06 - 03672064 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-04-21 16:01 - 2017-04-01 02:05 - 00047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-21 16:01 - 2017-04-01 02:04 - 00364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2017-04-21 16:01 - 2017-04-01 02:04 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-04-21 16:01 - 2017-04-01 02:02 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-04-21 16:01 - 2017-04-01 02:02 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-04-21 16:01 - 2017-04-01 01:59 - 11869696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-21 16:01 - 2017-04-01 01:58 - 23680512 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-21 16:01 - 2017-04-01 01:58 - 06296064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-04-21 16:01 - 2017-04-01 01:58 - 01506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-21 16:01 - 2017-04-01 01:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2017-04-21 16:01 - 2017-04-01 01:55 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-04-21 16:01 - 2017-04-01 01:55 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-04-21 16:01 - 2017-04-01 01:55 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-04-21 16:01 - 2017-04-01 01:53 - 12787200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-21 16:01 - 2017-04-01 01:52 - 08247296 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-04-21 16:01 - 2017-04-01 01:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-21 16:01 - 2017-04-01 01:52 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-21 16:01 - 2017-04-01 01:50 - 01657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-04-21 16:01 - 2017-04-01 01:50 - 01605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-21 16:01 - 2017-04-01 01:48 - 01356800 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-04-21 16:01 - 2017-04-01 01:47 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-04-21 16:01 - 2017-04-01 01:45 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-21 16:01 - 2017-04-01 01:44 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-21 16:01 - 2017-03-31 23:00 - 00032004 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2017-04-21 16:01 - 2017-03-25 10:28 - 00543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-04-21 15:59 - 2017-04-21 15:59 - 00002679 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Otevřít dokument Office.lnk
2017-04-21 15:59 - 2017-04-21 15:59 - 00002655 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Nový dokument Office.lnk
2017-04-21 15:59 - 2017-04-21 15:59 - 00000384 _____ C:\Windows\ODBC.INI
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\Windows\SHELLNEW
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\Windows\PCHEALTH
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2017-04-21 15:59 - 2017-04-21 15:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-21 15:56 - 2017-04-21 15:56 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Ahead
2017-04-21 15:56 - 2017-04-21 15:56 - 00000000 ____D C:\Users\Rampa\AppData\Local\Disc_Soft_Ltd
2017-04-21 15:56 - 2017-04-21 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Ultra Edition
2017-04-21 15:56 - 2017-04-21 15:56 - 00000000 ____D C:\ProgramData\Ahead
2017-04-21 15:55 - 2017-04-21 15:55 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2017-04-21 15:54 - 2017-04-21 15:54 - 00000000 ____D C:\ProgramData\Nero
2017-04-21 15:54 - 2017-04-21 15:54 - 00000000 ____D C:\Program Files (x86)\Nero
2017-04-21 15:54 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-04-21 15:54 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-04-21 15:53 - 2017-04-21 16:12 - 00000210 _____ C:\Users\Rampa\Desktop\KHOLAT.url
2017-04-21 15:46 - 2017-04-21 15:46 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-21 15:46 - 2017-04-21 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-21 15:46 - 2017-04-21 15:46 - 00000000 ____D C:\Program Files\WinRAR
2017-04-21 15:44 - 2017-04-21 15:44 - 00000000 ____D C:\Users\Rampa\AppData\Local\Steam
2017-04-21 15:44 - 2017-04-21 15:44 - 00000000 ____D C:\Users\Rampa\AppData\Local\CEF
2017-04-21 15:42 - 2017-04-24 17:58 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-21 15:42 - 2017-04-21 15:42 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk
2017-04-21 15:42 - 2017-04-21 15:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-04-21 15:36 - 2017-04-24 00:23 - 00000000 ____D C:\Users\Rampa\Downloads\Tancování
2017-04-21 15:29 - 2017-04-22 20:05 - 00000000 ____D C:\Hry
2017-04-21 15:17 - 2017-04-21 15:17 - 00000762 _____ C:\Users\Rampa\Desktop\Dokumenty.lnk
2017-04-21 15:17 - 2017-04-21 15:17 - 00000436 _____ C:\Users\Rampa\Desktop\Tento počítač.lnk
2017-04-21 15:16 - 2017-04-21 15:16 - 00000000 ____D C:\Users\Rampa\Downloads\SHAREit
2017-04-21 15:16 - 2017-04-21 15:16 - 00000000 ____D C:\Users\Rampa\Documents\Seznam DVD 2008
2017-04-21 15:15 - 2017-04-21 15:15 - 00000000 ____D C:\Users\Rampa\Downloads\Letak tancovani
2017-04-21 15:14 - 2017-04-21 15:14 - 00000000 ____D C:\Users\Rampa\Downloads\Geocaching
2017-04-21 15:12 - 2017-04-22 07:28 - 00000000 ____D C:\Users\Rampa\Documents\EA Games
2017-04-21 15:06 - 2017-04-21 15:38 - 00000000 ____D C:\Users\Default\AppData\Local\JDawlond0000025
2017-04-21 15:06 - 2017-04-21 15:38 - 00000000 ____D C:\Users\Default User\AppData\Local\JDawlond0000025
2017-04-21 14:57 - 2017-04-23 14:05 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\DAEMON Tools Lite
2017-04-21 14:57 - 2017-04-22 17:35 - 00000000 ____D C:\Program Files (x86)\Refaghtreiceied Log
2017-04-21 14:57 - 2017-04-21 14:58 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2017-04-21 14:57 - 2017-04-21 14:57 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2017-04-21 14:57 - 2017-04-21 14:57 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2017-04-21 14:57 - 2017-04-21 14:57 - 00006120 _____ C:\Windows\System32\Tasks\Refaghtreiceied Log
2017-04-21 14:57 - 2017-04-21 14:57 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy
2017-04-21 14:57 - 2017-04-21 14:57 - 00000000 ____D C:\Users\Rampa\AppData\Local\Zecayatemucult
2017-04-21 14:57 - 2017-04-21 14:57 - 00000000 ____D C:\Program Files (x86)\Lerjale
2017-04-21 14:56 - 2017-04-21 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-04-21 14:56 - 2017-04-21 14:56 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-04-21 14:56 - 2017-04-21 14:56 - 00000000 ____D C:\Program Files\VideoLAN
2017-04-21 14:54 - 2017-04-21 14:54 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Google
2017-04-21 14:53 - 2017-04-21 14:53 - 00002475 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 7.0.lnk
2017-04-21 14:53 - 2017-04-21 14:53 - 00000000 ____D C:\ProgramData\Adobe
2017-04-21 14:52 - 2017-04-22 14:24 - 00000000 ____D C:\Program Files (x86)\Google
2017-04-21 14:52 - 2017-04-21 19:31 - 00000000 ____D C:\Users\Rampa\AppData\Local\Google
2017-04-21 14:52 - 2017-04-21 14:58 - 00003470 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-21 14:52 - 2017-04-21 14:58 - 00003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-21 14:52 - 2017-04-21 14:52 - 00002348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-21 14:52 - 2017-04-21 14:52 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-04-21 14:52 - 2017-04-21 14:52 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-04-21 14:50 - 2017-04-21 14:50 - 00000000 ____D C:\Users\Rampa\AppData\Local\MicrosoftEdge
2017-04-21 13:10 - 2017-04-21 13:06 - 00532136 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-21 11:57 - 2017-04-23 14:05 - 00000000 ____D C:\Windows\Panther
2017-04-21 11:22 - 2017-04-21 15:16 - 00000000 ____D C:\Users\Rampa\AppData\Local\Comms
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____D C:\Windows\system32\DAX3
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____D C:\Windows\system32\DAX2
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____D C:\ProgramData\Audyssey Labs
2017-04-21 11:17 - 2017-04-21 11:17 - 00000000 ____D C:\Program Files\Realtek
2017-04-21 11:17 - 2017-03-30 01:40 - 15202032 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 03299816 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 02190984 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 01382232 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 01337640 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 00852136 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 00604800 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 00447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2017-04-21 11:17 - 2017-03-30 01:40 - 00075536 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 03410832 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 03122648 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 01435136 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00984912 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00965016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00873456 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00532368 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00467152 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00381408 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00341144 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00341144 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00221960 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00209528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00166200 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2017-04-21 11:17 - 2017-03-30 01:39 - 00158696 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 03503040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 01016416 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00876400 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SEHDHF32.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00867152 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00865104 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00736936 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00525256 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00214824 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00110976 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00088312 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:38 - 00083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 03494264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 03082024 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 01780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 01591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 01353272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00708304 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00680544 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00406448 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2APIPCLL.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00366120 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00360344 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00253856 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00203840 _____ (Harman) C:\Windows\system32\HMHVS.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00190928 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00190928 _____ (Harman) C:\Windows\system32\HMEQ.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00179592 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00134192 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2017-04-21 11:17 - 2017-03-30 01:37 - 00084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 05346992 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 02444680 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 01508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 01170872 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOvlldp.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 00743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 00441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 00253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2017-04-21 11:17 - 2017-03-30 01:36 - 00252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 72520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2017-04-21 11:17 - 2017-03-30 01:32 - 07172904 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 06264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 05707264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-04-21 11:17 - 2017-03-30 01:32 - 03205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 03014656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-04-21 11:17 - 2017-03-30 01:32 - 02209280 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 01133064 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 00416504 _____ (Harman) C:\Windows\system32\HMUI.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 00378376 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 00258864 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 00154360 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2017-04-21 11:17 - 2017-03-30 01:32 - 00023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-04-21 11:17 - 2017-03-29 20:08 - 12733323 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-04-21 11:17 - 2017-03-29 20:08 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2017-04-21 11:16 - 2017-04-23 18:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-04-21 11:16 - 2017-04-23 18:43 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-04-21 11:16 - 2017-04-21 11:18 - 00000000 ___HD C:\Program Files (x86)\Temp
2017-04-21 11:16 - 2017-03-30 01:36 - 02993712 _____ (Audyssey Labs) C:\Windows\system32\AudysseyEfx.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 01965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 01959600 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 01520008 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOProp.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 01326416 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOv251.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 00362048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 00327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 00310416 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2017-04-21 11:16 - 2017-03-30 01:36 - 00272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2017-04-21 11:16 - 2017-03-30 01:32 - 07096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2017-04-21 11:16 - 2017-03-30 01:32 - 00122312 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-04-21 11:16 - 2017-03-30 01:32 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2017-04-21 11:16 - 2017-03-30 01:32 - 00105304 _____ C:\Windows\system32\audioLibVc.dll
2017-04-21 11:16 - 2016-09-22 08:55 - 02839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-04-21 11:12 - 2017-04-21 11:12 - 00000000 ____D C:\ProgramData\USOShared
2017-04-21 11:12 - 2016-10-22 08:04 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-04-21 11:12 - 2016-10-22 08:04 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-04-21 11:12 - 2016-10-21 09:17 - 07500035 _____ C:\Windows\system32\nvcoproc.bin
2017-04-21 11:11 - 2017-04-24 19:50 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-21 11:11 - 2017-04-21 17:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-04-21 11:11 - 2017-04-21 17:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-04-21 11:11 - 2017-04-21 17:11 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-04-21 11:11 - 2017-03-23 15:44 - 00521656 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-04-21 11:11 - 2016-10-22 07:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-04-21 11:09 - 2017-04-24 19:55 - 02186500 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-21 11:07 - 2017-04-21 11:07 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-21 11:07 - 2017-04-21 11:07 - 00002391 _____ C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-21 11:07 - 2017-04-21 11:07 - 00000000 ___RD C:\Users\Rampa\OneDrive
2017-04-21 11:06 - 2017-04-21 11:06 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-04-21 11:05 - 2017-04-23 21:27 - 00000000 ____D C:\Users\Rampa\AppData\Roaming\Adobe
2017-04-21 11:05 - 2017-04-23 21:16 - 00000000 ____D C:\Users\Rampa\AppData\Local\Packages
2017-04-21 11:05 - 2017-04-22 07:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-21 11:05 - 2017-04-21 19:42 - 00000000 ____D C:\Users\Rampa\AppData\Local\VirtualStore
2017-04-21 11:05 - 2017-04-21 11:05 - 00000000 ____D C:\Users\Rampa\AppData\Local\TileDataLayer
2017-04-21 11:05 - 2017-04-21 11:05 - 00000000 ____D C:\Users\Rampa\AppData\Local\Publishers
2017-04-21 11:05 - 2017-04-21 11:05 - 00000000 ____D C:\Users\Rampa\AppData\Local\ConnectedDevicesPlatform
2017-04-21 11:04 - 2017-04-24 19:51 - 00000000 ____D C:\Users\Rampa
2017-04-21 11:04 - 2017-04-21 11:04 - 00000020 ___SH C:\Users\Rampa\ntuser.ini
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Šablony
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Soubory cookie
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Poslední
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Okolní tiskárny
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Okolní síť
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Nabídka Start
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Dokumenty
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Documents\Obrázky
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Documents\Hudba
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Documents\Filmy
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\Data aplikací
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 _SHDL C:\Users\Rampa\AppData\Local\Data aplikací
2017-04-21 11:04 - 2017-04-21 11:04 - 00000000 ____D C:\Windows\CSC
2017-04-21 11:03 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Šablony
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Poslední
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Okolní síť
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Dokumenty
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\Data aplikací
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Šablony
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Plocha
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\ProgramData\Data aplikací
2017-04-21 11:02 - 2017-04-21 11:02 - 00000000 _SHDL C:\Documents and Settings
2017-04-21 10:58 - 2017-04-24 19:50 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-21 10:58 - 2017-04-21 10:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-04-21 10:57 - 2017-04-23 18:46 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-04-21 10:57 - 2017-04-21 16:10 - 00388984 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-21 10:57 - 2017-04-21 10:57 - 00000000 ____D C:\Windows\ServiceProfiles
2017-04-21 08:51 - 2017-04-24 12:08 - 00167936 _____ C:\Users\Rampa\Desktop\Linky Penam.xls
2017-04-21 08:50 - 2016-02-26 21:34 - 17922544 _____ C:\Users\Rampa\Downloads\Mnam-mnam-Bobik.avi
2017-04-21 08:49 - 2017-04-16 22:32 - 00028672 _____ C:\Users\Rampa\Documents\PC Bobánek1.XLS
2017-04-21 08:49 - 2016-07-05 18:04 - 00000092 _____ C:\Users\Rampa\Documents\Geocoin 1.txt
2017-04-21 08:49 - 2014-04-10 12:05 - 00169585 _____ C:\Users\Rampa\Documents\MP40_RUBBER_BAND_GUN.PDF
2017-04-21 08:49 - 2014-04-10 12:02 - 00331669 _____ C:\Users\Rampa\Documents\SINGLE_ACTION_ARMY_REVOLVER.PDF
2017-04-21 08:49 - 2013-11-01 21:22 - 00017920 _____ C:\Users\Rampa\Documents\penam2.XLS
2017-04-21 08:49 - 2013-03-10 21:33 - 00071680 _____ C:\Users\Rampa\Documents\projekt.FLA
2017-04-21 08:49 - 2013-03-10 21:33 - 00010942 _____ C:\Users\Rampa\Documents\projekt.SWF
2017-04-21 08:49 - 2012-05-29 11:01 - 00017920 _____ C:\Users\Rampa\Documents\penam.XLS
2017-04-21 08:49 - 2011-02-06 11:10 - 00000186 _____ C:\Users\Rampa\Documents\serial.txt
2017-04-21 08:49 - 2010-04-08 19:49 - 00044556 _____ C:\Users\Rampa\Documents\Director's Cut.PRF
2017-04-21 08:49 - 2010-04-05 09:22 - 00000112 _____ C:\Users\Rampa\Documents\DiabloIILoDserial.txt
2017-04-21 08:49 - 2010-04-05 09:14 - 00000038 _____ C:\Users\Rampa\Documents\DiabloIIserial.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-24 19:55 - 2017-03-20 06:39 - 00959484 _____ C:\Windows\system32\perfh005.dat
2017-04-24 19:55 - 2017-03-20 06:39 - 00214350 _____ C:\Windows\system32\perfc005.dat
2017-04-24 19:50 - 2017-03-18 13:40 - 00786432 _____ C:\Windows\system32\config\BBI
2017-04-24 17:59 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\rescache
2017-04-24 13:52 - 2017-03-18 23:01 - 00000000 ____D C:\Windows\INF
2017-04-23 21:21 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\AppReadiness
2017-04-23 21:15 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-23 19:02 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\NDF
2017-04-22 07:27 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2017-04-22 07:23 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\appcompat
2017-04-21 21:25 - 2017-03-18 22:51 - 00000000 ____D C:\Windows\CbsTemp
2017-04-21 20:58 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\SysWOW64\MUI
2017-04-21 20:58 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\MUI
2017-04-21 15:59 - 2017-03-18 23:03 - 00000188 _____ C:\Windows\win.ini
2017-04-21 15:59 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\IME
2017-04-21 15:59 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\Help
2017-04-21 15:57 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\System
2017-04-21 11:56 - 2017-03-18 23:03 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-04-21 11:12 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-04-21 11:04 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\spool
2017-04-21 11:04 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-04-21 11:02 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-21 11:02 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-04-21 11:01 - 2017-03-18 13:40 - 00000000 ____D C:\Windows\system32\Sysprep
2017-04-21 10:59 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\PrintDialog
2017-04-21 10:59 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\MiracastView
2017-04-21 10:59 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-04-21 10:58 - 2017-03-20 06:41 - 00000000 ____D C:\Windows\HoloShell
2017-04-21 10:58 - 2017-03-18 13:40 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-04-03 18:56 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-03 18:56 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2017-04-23 14:08 - 2017-04-23 14:10 - 0029696 _____ () C:\Users\Rampa\AppData\Local\MSGBOX.EXE
2017-04-21 11:17 - 2017-04-21 11:17 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
2017-04-23 22:38 - 2017-04-23 22:38 - 0043520 _____ () C:\Users\Rampa\AppData\Local\Temp\proxy_vole8966524360731065989.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-04-21 10:57

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKLM\...\Providers\zowvcwal: C:\Program Files (x86)\Refaghtreiceied Log\local64spl.dll
CHR StartupUrls: ChromeDefaultData -> "hxxp://www.seznam.cz/","hxxps://accounts.googl ... 6X&type=hp"
CHR Profile: C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-04-24] <==== ATTENTION
C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy
C:\Users\Rampa\AppData\Local\Zecayatemucult
C:\Program Files (x86)\Lerjale
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\Users\Rampa\AppData\Local\Temp
initialpage123 - Uninstall (HKLM-x32\...\{67AC0674-6C5E-4349-A0C6-FE2C890FB9C6}) (Version: - ) <==== ATTENTION

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-04-2017 01
Ran by Rampa (24-04-2017 21:13:40) Run:1
Running from C:\Users\Rampa\Desktop
Loaded Profiles: Rampa (Available Profiles: Rampa)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKLM\...\Providers\zowvcwal: C:\Program Files (x86)\Refaghtreiceied Log\local64spl.dll
CHR StartupUrls: ChromeDefaultData -> "hxxp://www.seznam.cz/","hxxps://accounts.googl ... 6X&type=hp"
CHR Profile: C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-04-24] <==== ATTENTION
C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy
C:\Users\Rampa\AppData\Local\Zecayatemucult
C:\Program Files (x86)\Lerjale
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\Users\Rampa\AppData\Local\Temp
initialpage123 - Uninstall (HKLM-x32\...\{67AC0674-6C5E-4349-A0C6-FE2C890FB9C6}) (Version: - ) <==== ATTENTION

EmptyTemp:
End
*****************

HKU\S-1-5-21-3076418431-1349520239-4206771579-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\zowvcwal => key removed successfully
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\\order zowvcwal => removed successfully
Chrome StartupUrls => removed successfully
C:\Users\Rampa\AppData\Local\Google\Chrome\User Data\ChromeDefaultData => moved successfully
C:\Users\Rampa\AppData\Roaming\Ckamorytherbasy => moved successfully
C:\Users\Rampa\AppData\Local\Zecayatemucult => moved successfully
C:\Program Files (x86)\Lerjale => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully

"C:\Users\Rampa\AppData\Local\Temp" folder move:

Could not move "C:\Users\Rampa\AppData\Local\Temp" => Scheduled to move on reboot.

initialpage123 - Uninstall (HKLM-x32\...\{67AC0674-6C5E-4349-A0C6-FE2C890FB9C6}) (Version: - ) <==== ATTENTION => Error: No automatic fix found for this entry.

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 26618569 B
Java, Flash, Steam htmlcache => 18091047 B
Windows/system/drivers => 20480 B
Edge => 308 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 241 B
LocalService => 818 B
NetworkService => 0 B
Rampa => 60426536 B

RecycleBin => 42126952 B
EmptyTemp: => 146.2 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 24-04-2017 21:15:56)

C:\Users\Rampa\AppData\Local\Temp => moved successfully

==== End of Fixlog 21:15:58 ====

Smazáno, log by již měl být OK.

Dekuji za pomoc. Preji hezky vecer a diky.

Také hezký den a nemáte zač!