Zdravím děsná odezva, a zablokovaná Facebook účet, ten internet asi nebude tím, ale pro jistotu poprosím o projetí logu.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ouki at 2016-05-12 18:18:43
Microsoft Windows 10 Pro
System drive C: has 150 GB (16%) free of 953 GB
Total RAM: 16328 MB (75% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:20:18, on 12.5.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal
Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ouki\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Andy\HandyAndy.exe
C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.1.16\deploy\LoLLauncher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.56\deploy\LoLPatcher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.199\deploy\LolClient.exe
C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.131\deploy\League of Legends.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ouki.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Fast Boot] C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKLM\..\Run: [Command Center] C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ouki\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Ouki\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: HandyAndy.lnk = ?
O4 - Global Startup: Killer Network Manager.lnk = C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
O23 - Service: GamingHotkey_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI Command Center Clock Service (MSIClock_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe
O23 - Service: MSI Command Center Comm Service (MSICOMM_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\MSICommService.exe
O23 - Service: MSI Command Center CPU Service (MSICPU_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe
O23 - Service: MSI Command Center control Service (MSICTL_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
O23 - Service: MSI Command Center DDR Service (MSIDDR_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
O23 - Service: MSI Command Center SMBus Service (MSISMB_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe
O23 - Service: MSI Command Center SuperIO Service (MSISuperIO_CC) - MSI - C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe
O23 - Service: MSI_FastBoot - MSI - C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
O23 - Service: MSI Live Update Service (MSI_LiveUpdate_Service) - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SuperRAIDSvc - Micro-Star INT'L CO., LTD. - C:\MSI\Smart Utilities\SuperRAIDSvc.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\SysWOW64\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\SysWOW64\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
--
End of file - 14270 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files\Killer Networking\Network Manager\KillerService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\SysWOW64\vmnat.exe
C:\WINDOWS\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe"
"C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe"
"C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe"
"C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\MSI\Smart Utilities\SuperRAIDSvc.exe"
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey F496D3E0-FD85-1AA9-FACA-D2151D38574A -Reinvoke
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Users\Ouki\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe"
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Ouki\AppData\Local\Steam\htmlcache" -steampid=2128 -buildid=1461972496 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"fontdrvhost.exe"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\Andy\HandyAndy.exe" startandy
"C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe" updateandrun lol_launcher LoLLauncher.exe
LoLLauncher.exe
"C:/Riot Games/League of Legends/RADS/projects/lol_patcher/releases/0.0.0.56/deploy/LoLPatcher.exe"
"C:/Riot Games/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.199/deploy//LolClient.exe" -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
"C:/Riot Games/League of Legends/RADS/solutions/lol_game_client_sln/releases/0.0.1.131/deploy/League of Legends.exe" "8394" "LoLPatcher.exe" "C:/Riot Games/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.199/deploy//LolClient.exe" "162.249.74.79 5107 3WjJv+BjVxAovpfCoVGSMg== 25443812"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=9064 --on-initialized-event-handle=564 --parent-handle=568
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8784.0.2081138137\509552498" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x1187 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.6510 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_22/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="8784.3.934918560\1042658118" --font-cache-shared-handle=1280 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_22/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="8784.4.638864336\2068473560" --font-cache-shared-handle=4576 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/Control/*DomRel-Enable/enable/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_22/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="8784.6.24572690\1816118684" --font-cache-shared-handle=3988 /prefetch:673131151
taskeng.exe {1EF9CF13-8DFF-41D0-BC68-AC169455EADE}
"C:\Users\Ouki\Downloads\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1567744305-3254084915-3206558403-100016_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1567744305-3254084915-3206558403-100016 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 632 636 644 8192 640
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Ouki\AppData\Roaming\Mozilla\Firefox\Profiles\um1yecr2.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.91.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.91.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-02 255088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29 2134648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-11 462400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-02 193136]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-11 173120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-02 255088]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-02 193136]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-10-16 8725248]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-05-02 2398776]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-05-02 1767944]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Ouki\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-25 554176]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2015-09-08 39408]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-04-30 3077712]
"uTorrent"=C:\Users\Ouki\AppData\Roaming\uTorrent\uTorrent.exe [2016-04-07 1959424]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50676864]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2015-06-16 18923008]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Fast Boot"=C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [2015-04-22 759120]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2016-03-17 1027024]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2016-04-28 11336656]
"Command Center"=C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [2016-02-16 830416]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-04-01 596504]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HandyAndy.lnk - C:\Program Files\Andy\HandyAndy.exe
Killer Network Manager.lnk - C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-05-12 18:18:43 ----D---- C:\Program Files\trend micro
2016-05-12 03:48:00 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2016-05-12 03:47:39 ----D---- C:\ProgramData\Malwarebytes
2016-05-12 03:47:39 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-12 03:47:39 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2016-05-12 03:47:39 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2016-05-12 03:47:39 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2016-05-10 22:35:43 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-05-10 22:35:42 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-05-10 22:35:41 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-05-10 22:35:41 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-05-10 22:35:41 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-05-10 22:35:40 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-05-10 22:35:40 ----A---- C:\WINDOWS\system32\mos.dll
2016-05-10 22:35:40 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-05-10 22:35:40 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-05-10 22:35:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-10 22:35:39 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-05-10 22:35:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\moshost.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-05-10 22:35:26 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-10 22:35:25 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-05-10 22:35:25 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-05-10 22:35:25 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-05-10 22:35:24 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-05-10 22:35:24 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-05-10 22:35:24 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-05-10 22:35:24 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-10 22:35:24 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-05-10 22:35:23 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-05-10 22:35:23 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-05-10 22:35:23 ----A---- C:\WINDOWS\system32\wups.dll
2016-05-10 22:35:23 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-05-10 22:35:02 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-05-10 22:35:02 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-05-10 22:35:01 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-05-10 22:35:01 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-05-10 22:35:01 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-05-10 22:35:01 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-05-10 22:35:01 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-05-10 22:34:53 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-05-10 22:34:52 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-05-10 22:34:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-05-10 22:34:49 ----A---- C:\WINDOWS\SYSWOW64\BrowserSettingSync.dll
2016-05-10 22:34:48 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-05-10 22:34:46 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2016-05-10 22:34:46 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2016-05-10 22:34:46 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-05-10 22:34:46 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-05-10 22:34:45 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-05-10 22:34:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-05-10 22:34:44 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2016-05-10 22:34:44 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2016-05-10 22:34:44 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-05-10 22:34:43 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2016-05-10 22:34:39 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-05-10 22:34:38 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-05-10 22:34:34 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-05-10 22:34:34 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-05-10 22:34:34 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2016-05-10 22:34:34 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-05-10 22:34:33 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-05-10 22:34:33 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-05-10 22:34:33 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-05-10 22:34:32 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2016-05-10 22:34:32 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-05-10 22:34:32 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-05-10 22:34:32 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-05-10 22:34:31 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-05-10 22:34:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-05-10 22:34:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-05-10 22:34:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-05-10 22:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-05-10 22:34:27 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-05-10 22:34:26 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-05-10 22:34:26 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-05-10 22:34:26 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-05-10 22:34:25 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-05-10 22:34:25 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-05-10 22:34:24 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-05-10 22:34:23 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-05-10 22:34:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-05-10 22:34:18 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-05-10 22:34:18 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-05-10 22:34:17 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-05-10 22:34:17 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2016-05-10 22:34:17 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2016-05-10 22:34:16 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-05-10 22:34:16 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-05-10 22:34:15 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-05-10 22:34:14 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2016-05-10 22:34:14 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2016-05-10 22:34:14 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-05-10 22:34:13 ----A---- C:\WINDOWS\SYSWOW64\ByteCodeGenerator.exe
2016-05-10 22:34:13 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-05-10 22:34:12 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-05-10 22:27:53 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2016-05-10 22:27:53 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-05-10 22:27:52 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-05-10 22:27:48 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-05-10 22:27:48 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-05-10 22:27:12 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-05-10 22:27:11 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2016-05-10 22:27:10 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-05-10 22:27:10 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-05-10 22:27:09 ----A---- C:\WINDOWS\system32\wininit.exe
2016-05-10 22:27:09 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-10 22:27:09 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-05-10 22:27:09 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-05-10 22:27:08 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-05-10 22:27:08 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-05-10 22:27:08 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-10 22:27:07 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-05-10 22:27:07 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-05-10 22:27:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-05-10 22:27:06 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-05-10 22:27:05 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-10 22:27:05 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-10 22:27:05 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-10 22:27:05 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-05-10 22:27:04 ----A---- C:\WINDOWS\system32\user32.dll
2016-05-10 22:27:04 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2016-05-10 22:27:03 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-10 22:27:03 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2016-05-10 22:26:58 ----A---- C:\WINDOWS\system32\twinui.dll
2016-05-10 22:26:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-05-10 22:26:56 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2016-05-10 22:26:51 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-10 22:26:49 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-05-10 22:26:45 ----A---- C:\WINDOWS\system32\shell32.dll
2016-05-10 22:26:41 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-05-10 22:26:41 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-05-10 22:26:40 ----A---- C:\WINDOWS\system32\shacct.dll
2016-05-10 22:26:40 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-10 22:26:40 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-10 22:26:40 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-05-10 22:26:40 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-10 22:26:39 ----A---- C:\WINDOWS\system32\schannel.dll
2016-05-10 22:26:39 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\hmkd.dll
2016-05-10 22:26:38 ----A---- C:\WINDOWS\system32\cryptngc.dll
2016-05-10 22:26:37 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-05-10 22:26:36 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-05-10 22:26:36 ----A---- C:\WINDOWS\system32\jscript.dll
2016-05-10 22:26:36 ----A---- C:\WINDOWS\system32\drivers\sdport.sys
2016-05-10 22:26:35 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-05-10 22:26:34 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-05-10 22:26:34 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-05-10 22:26:33 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-10 22:26:33 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-05-10 22:26:32 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-10 22:26:08 ----A---- C:\WINDOWS\system32\rsaenh.dll
2016-05-10 22:26:08 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-05-10 22:26:07 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-05-10 22:26:07 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-05-10 22:26:07 ----A---- C:\WINDOWS\system32\provengine.dll
2016-05-10 22:26:06 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-10 22:26:05 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-05-10 22:25:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-05-10 22:25:53 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-05-10 22:25:52 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-10 22:25:52 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-10 22:25:52 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-05-10 22:25:51 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-05-10 22:25:50 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-05-10 22:25:47 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-05-10 22:25:46 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-10 22:25:45 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-05-10 22:25:40 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-05-10 22:25:40 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-10 22:25:39 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-10 22:25:38 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-05-10 22:25:38 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-05-10 22:25:38 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-05-10 22:25:38 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-05-10 22:25:38 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-05-10 22:25:36 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-05-10 22:25:32 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-05-10 22:25:32 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-05-10 22:25:31 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-05-10 22:25:29 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-05-10 22:25:21 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-05-10 22:25:20 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-05-10 22:25:20 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-05-10 22:25:19 ----A---- C:\WINDOWS\system32\drivers\filecrypt.sys
2016-05-10 22:25:19 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2016-05-10 22:25:17 ----A---- C:\WINDOWS\explorer.exe
2016-05-10 22:25:16 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-10 22:25:15 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-05-10 22:25:15 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2016-05-10 22:25:14 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-05-10 22:25:14 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-05-10 22:25:13 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-10 22:25:13 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-05-10 22:25:12 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-05-10 22:25:12 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-05-10 22:25:11 ----A---- C:\WINDOWS\system32\dwminit.dll
2016-05-10 22:25:09 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-05-10 22:25:09 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-05-10 22:25:09 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-10 22:25:08 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-05-10 22:25:08 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-05-10 22:24:59 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-10 22:24:58 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-10 22:24:52 ----A---- C:\WINDOWS\system32\wshbth.dll
2016-05-10 22:24:52 ----A---- C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-10 22:24:52 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2016-05-10 22:24:14 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-10 22:24:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-10 22:24:13 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-10 22:24:13 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-10 22:24:12 ----A---- C:\WINDOWS\system32\invagent.dll
2016-05-10 22:24:12 ----A---- C:\WINDOWS\system32\devinv.dll
2016-05-10 22:24:12 ----A---- C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-10 22:24:12 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-05-10 22:24:12 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-05-10 22:24:11 ----A---- C:\WINDOWS\system32\aepic.dll
2016-05-10 22:24:11 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-05-10 22:24:00 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-05-10 22:24:00 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-05-10 22:24:00 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-05-10 22:23:59 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-05-05 03:24:54 ----D---- C:\Users\Ouki\AppData\Roaming\VMware
2016-05-05 03:24:12 ----A---- C:\WINDOWS\SYSWOW64\vsocklib.dll
2016-05-05 03:24:12 ----A---- C:\WINDOWS\system32\vsocklib.dll
2016-05-05 03:24:12 ----A---- C:\WINDOWS\system32\drivers\vsock.sys
2016-05-05 03:24:12 ----A---- C:\WINDOWS\system32\drivers\vmx86.sys
2016-05-05 03:24:11 ----A---- C:\WINDOWS\system32\drivers\VMkbd.sys
2016-05-05 03:23:43 ----A---- C:\WINDOWS\SYSWOW64\vmnetdhcp.exe
2016-05-05 03:23:40 ----A---- C:\WINDOWS\SYSWOW64\vmnat.exe
2016-05-05 03:23:40 ----A---- C:\WINDOWS\system32\drivers\vmnetuserif.sys
2016-05-05 03:23:39 ----A---- C:\WINDOWS\system32\vnetlib64.dll
2016-05-05 03:23:37 ----A---- C:\WINDOWS\system32\drivers\hcmon.sys
2016-05-05 03:23:23 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-05-05 03:23:22 ----D---- C:\Program Files\Common Files\VMware
2016-05-05 03:23:20 ----D---- C:\Program Files (x86)\VMware
2016-05-05 03:23:20 ----AD---- C:\ProgramData\VMware
2016-05-05 03:23:10 ----D---- C:\ProgramData\Apple
2016-05-05 03:23:10 ----AD---- C:\Program Files\Bonjour
2016-05-05 03:23:10 ----AD---- C:\Program Files (x86)\Bonjour
2016-05-05 03:21:59 ----D---- C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 03:21:40 ----D---- C:\Users\Ouki\AppData\Roaming\Andy
2016-05-05 03:21:40 ----AD---- C:\Program Files\Andy
2016-05-04 18:48:48 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-05-04 18:48:48 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-05-04 18:42:38 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvdispgenco6436510.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvdispco6436510.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-05-04 18:41:03 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-04-27 12:43:54 ----A---- C:\WINDOWS\system32\FintekIcon1.dll
2016-04-27 12:43:54 ----A---- C:\WINDOWS\system32\drivers\I2cHkBurn.sys
2016-04-16 00:53:42 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1-1-0-8-1.dll
2016-04-16 00:53:06 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo-1-1-0-8-1.exe
2016-04-16 00:52:48 ----A---- C:\WINDOWS\system32\vulkan-1-1-0-8-1.dll
2016-04-16 00:52:10 ----A---- C:\WINDOWS\system32\vulkaninfo-1-1-0-8-1.exe
2016-04-14 16:53:34 ----A---- C:\WINDOWS\system32\vnetinst.dll
2016-04-14 16:53:32 ----A---- C:\WINDOWS\system32\vmnetbridge.dll
2016-04-14 16:53:32 ----A---- C:\WINDOWS\system32\drivers\vmnetbridge.sys
2016-04-14 16:53:32 ----A---- C:\WINDOWS\system32\drivers\vmnetadapter.sys
2016-04-14 16:53:32 ----A---- C:\WINDOWS\system32\drivers\vmnet.sys
2016-04-13 00:59:29 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-04-13 00:59:29 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-04-13 00:59:28 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-04-13 00:59:28 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-04-13 00:59:28 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-04-13 00:59:27 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-04-13 00:59:27 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-04-13 00:59:27 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-04-13 00:59:26 ----A---- C:\WINDOWS\system32\wininet.dll
2016-04-13 00:59:25 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-04-13 00:59:25 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-04-13 00:59:25 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-04-13 00:59:25 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-04-13 00:59:25 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-04-13 00:59:23 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-04-13 00:59:22 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-13 00:59:21 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-04-13 00:59:15 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-04-13 00:59:15 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-04-13 00:59:15 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-04-13 00:59:15 ----A---- C:\WINDOWS\system32\SRH.dll
2016-04-13 00:59:11 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-04-13 00:59:11 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-04-13 00:59:11 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-04-13 00:59:11 ----A---- C:\WINDOWS\system32\InputService.dll
2016-04-13 00:59:11 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-04-13 00:59:09 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-04-13 00:59:07 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-04-13 00:59:06 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-13 00:59:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-04-13 00:59:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-04-13 00:59:05 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-04-13 00:59:04 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-04-13 00:59:04 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-04-13 00:59:04 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-04-13 00:59:03 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-04-13 00:59:03 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-04-13 00:59:03 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-04-13 00:59:02 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-04-13 00:59:01 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-04-13 00:59:01 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2016-04-13 00:59:01 ----A---- C:\WINDOWS\system32\esent.dll
2016-04-13 00:59:00 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-13 00:59:00 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-04-13 00:58:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-04-13 00:58:58 ----A---- C:\WINDOWS\system32\winload.exe
2016-04-13 00:58:58 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-04-13 00:58:58 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-04-13 00:58:58 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-04-13 00:58:57 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-13 00:58:56 ----A---- C:\WINDOWS\system32\winresume.exe
2016-04-13 00:58:55 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-04-13 00:58:55 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-13 00:58:55 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-04-13 00:58:55 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-13 00:58:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-04-13 00:58:54 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-04-13 00:58:54 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-04-13 00:58:54 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-04-13 00:58:54 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-04-13 00:58:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-04-13 00:58:53 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-04-13 00:58:53 ----A---- C:\WINDOWS\SYSWOW64\AccountsRt.dll
2016-04-13 00:58:53 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-04-13 00:58:53 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-04-13 00:58:53 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-04-13 00:58:53 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2016-04-13 00:58:52 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-04-13 00:58:52 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-04-13 00:58:52 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-04-13 00:58:52 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-04-13 00:58:51 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-04-13 00:58:51 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-04-13 00:58:51 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-04-13 00:58:51 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-04-13 00:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-04-13 00:58:50 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-04-13 00:58:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-04-13 00:58:49 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-04-13 00:58:47 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-04-13 00:58:47 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-04-13 00:58:46 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-04-13 00:58:46 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-04-13 00:58:46 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2016-04-13 00:58:46 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-04-13 00:58:46 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-04-13 00:58:46 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-04-13 00:58:45 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2016-04-13 00:58:45 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-04-13 00:58:45 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-04-13 00:58:45 ----A---- C:\WINDOWS\system32\msi.dll
2016-04-13 00:58:45 ----A---- C:\WINDOWS\system32\drivers\ufx01000.sys
2016-04-13 00:58:45 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2016-04-13 00:58:44 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-04-13 00:58:44 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-04-13 00:58:43 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-04-13 00:58:43 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-04-13 00:58:43 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2016-04-13 00:58:43 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-04-13 00:58:43 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-04-13 00:58:43 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-04-13 00:58:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\policymanager.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\ncbservice.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\fveui.dll
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-04-13 00:58:41 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-04-13 00:58:40 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-04-13 00:58:40 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-04-13 00:58:40 ----A---- C:\WINDOWS\system32\omadmapi.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\system32\srvcli.dll
2016-04-13 00:58:39 ----A---- C:\WINDOWS\system32\netapi32.dll
2016-04-13 00:58:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Devices.dll
2016-04-13 00:58:38 ----A---- C:\WINDOWS\system32\wkscli.dll
2016-04-13 00:58:38 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-04-13 00:58:37 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2016-04-13 00:58:37 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.dll
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\oleacc.dll
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\iuilp.dll
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\easinvoker.exe
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2016-04-13 00:58:37 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-04-13 00:58:36 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\system32\wsdchngr.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2016-04-13 00:58:36 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-04-13 00:58:36 ----A---- C:\WINDOWS\system32\DAFWSD.dll
2016-04-13 00:58:35 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-13 00:58:35 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-04-13 00:58:35 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2016-04-13 00:58:35 ----A---- C:\WINDOWS\system32\credprovhost.dll
2016-04-13 00:58:34 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\SYSWOW64\wsdchngr.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\system32\dmcsps.dll
2016-04-13 00:58:33 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-04-13 00:58:32 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2016-04-13 00:58:32 ----A---- C:\WINDOWS\system32\WSDApi.dll
2016-04-13 00:58:32 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2016-04-13 00:58:32 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-04-13 00:58:31 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\browser.dll
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\browcli.dll
2016-04-13 00:58:31 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\tbauth.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\drivers\serial.sys
2016-04-13 00:58:29 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-04-13 00:58:28 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-04-13 00:58:28 ----A---- C:\WINDOWS\system32\samlib.dll
2016-04-13 00:58:27 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2016-04-13 00:58:27 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-04-13 00:58:27 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2016-04-13 00:58:27 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-04-13 00:58:26 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2016-04-13 00:58:26 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2016-04-13 00:58:25 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-04-13 00:58:25 ----A---- C:\WINDOWS\system32\dmenterprisediagnostics.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\SYSWOW64\OnDemandConnRouteHelper.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-04-13 00:58:23 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-04-13 00:58:22 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2016-04-13 00:58:22 ----A---- C:\WINDOWS\SYSWOW64\oleacchooks.dll
2016-04-13 00:58:22 ----A---- C:\WINDOWS\system32\oleacchooks.dll
2016-04-13 00:58:21 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-04-13 00:58:21 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-04-13 00:58:20 ----A---- C:\WINDOWS\SYSWOW64\MTF.dll
2016-04-13 00:58:20 ----A---- C:\WINDOWS\system32\MTF.dll
======List of files/folders modified in the last 1 month======
2016-05-12 18:18:43 ----RD---- C:\Program Files
2016-05-12 18:17:48 ----D---- C:\WINDOWS\Prefetch
2016-05-12 18:17:37 ----D---- C:\WINDOWS\Temp
2016-05-12 18:15:00 ----D---- C:\WINDOWS\system32\sru
2016-05-12 17:21:28 ----D---- C:\WINDOWS\AppReadiness
2016-05-12 17:16:18 ----HD---- C:\Program Files\WindowsApps
2016-05-12 16:21:02 ----D---- C:\WINDOWS\system32\Tasks
2016-05-12 16:21:02 ----AD---- C:\Program Files (x86)\Opera
2016-05-12 16:15:14 ----D---- C:\Users\Ouki\AppData\Roaming\Skype
2016-05-12 16:14:52 ----D---- C:\Users\Ouki\AppData\Roaming\uTorrent
2016-05-12 16:14:23 ----D---- C:\Program Files (x86)\Steam
2016-05-12 16:12:57 ----D---- C:\ProgramData\NVIDIA
2016-05-12 14:21:28 ----D---- C:\WINDOWS\rescache
2016-05-12 14:11:58 ----D---- C:\WINDOWS\system32\config
2016-05-12 14:00:46 ----D---- C:\WINDOWS\system32\DriverStore
2016-05-12 13:17:32 ----D---- C:\WINDOWS\INF
2016-05-12 13:17:29 ----D---- C:\WINDOWS\WinSxS
2016-05-12 13:15:39 ----D---- C:\WINDOWS\system32\catroot2
2016-05-12 13:14:01 ----D---- C:\WINDOWS\Microsoft.NET
2016-05-12 13:13:17 ----RD---- C:\WINDOWS\assembly
2016-05-12 03:48:38 ----D---- C:\WINDOWS\system32\drivers
2016-05-12 03:47:39 ----RD---- C:\Program Files (x86)
2016-05-12 03:47:39 ----HD---- C:\ProgramData
2016-05-12 00:58:04 ----D---- C:\Users\Ouki\AppData\Roaming\TS3Client
2016-05-11 12:02:12 ----D---- C:\ProgramData\Oracle
2016-05-11 12:02:09 ----SHDC---- C:\WINDOWS\Installer
2016-05-11 12:02:09 ----SHD---- C:\Config.Msi
2016-05-11 12:02:09 ----D---- C:\Program Files (x86)\Java
2016-05-11 12:02:07 ----D---- C:\WINDOWS\SysWOW64
2016-05-11 12:01:57 ----D---- C:\Program Files (x86)\Common Files
2016-05-11 12:01:29 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-05-11 04:00:11 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-05-11 04:00:11 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-05-11 04:00:04 ----D---- C:\WINDOWS\system32\oobe
2016-05-11 04:00:04 ----D---- C:\WINDOWS\system32\migration
2016-05-11 04:00:04 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-05-11 04:00:04 ----D---- C:\WINDOWS\system32\cs-CZ
2016-05-11 04:00:04 ----D---- C:\WINDOWS\system32\appraiser
2016-05-11 04:00:03 ----D---- C:\WINDOWS\System32
2016-05-11 03:59:58 ----D---- C:\WINDOWS\Provisioning
2016-05-11 03:59:54 ----D---- C:\WINDOWS\bcastdvr
2016-05-11 03:59:54 ----D---- C:\WINDOWS\AppPatch
2016-05-11 03:59:54 ----D---- C:\Windows
2016-05-11 03:59:54 ----D---- C:\Program Files\Windows Journal
2016-05-11 03:59:54 ----D---- C:\Program Files\Internet Explorer
2016-05-11 03:59:54 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-11 00:32:48 ----D---- C:\WINDOWS\Tasks
2016-05-11 00:24:03 ----D---- C:\WINDOWS\CbsTemp
2016-05-11 00:22:49 ----D---- C:\WINDOWS\system32\MRT
2016-05-11 00:18:42 ----A---- C:\WINDOWS\system32\MRT.exe
2016-05-10 23:02:56 ----D---- C:\MSI
2016-05-10 18:54:44 ----D---- C:\ProgramData\Package Cache
2016-05-10 18:54:42 ----D---- C:\uninstall
2016-05-10 18:54:32 ----D---- C:\WINDOWS\Logs
2016-05-10 18:54:21 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-10 18:53:13 ----SHD---- C:\System Volume Information
2016-05-09 23:22:23 ----RD---- C:\Program Files (x86)\Skype
2016-05-05 03:23:22 ----D---- C:\Program Files\Common Files
2016-05-04 18:43:01 ----D---- C:\ProgramData\NVIDIA Corporation
2016-05-04 18:42:31 ----D---- C:\Program Files (x86)\VulkanRT
2016-05-04 02:06:26 ----SD---- C:\Users\Ouki\AppData\Roaming\Microsoft
2016-05-03 03:24:44 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-05-02 15:18:20 ----AD---- C:\Program Files (x86)\Battle.net
2016-05-02 07:39:01 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2016-05-02 07:39:01 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2016-05-02 07:38:42 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2016-05-02 07:38:42 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2016-05-02 07:38:42 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-05-02 01:52:12 ----AD---- C:\Program Files (x86)\Diablo III
2016-04-27 16:33:47 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-04-27 16:33:47 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-04-27 16:33:47 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-04-27 16:33:47 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-04-27 16:33:47 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-04-27 14:18:03 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-04-27 14:18:03 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-04-27 14:18:01 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-04-27 14:18:01 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-04-27 14:18:01 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-04-27 14:18:01 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-04-27 14:18:00 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-04-27 14:18:00 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-04-26 19:03:52 ----AD---- C:\Program Files\TeamSpeak 3 Client
2016-04-25 21:01:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-25 20:53:22 ----D---- C:\WINDOWS\system32\NDF
2016-04-22 09:57:45 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2016-04-21 04:15:16 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-04-21 04:15:16 ----D---- C:\WINDOWS\system32\Boot
2016-04-21 04:15:07 ----D---- C:\WINDOWS\PolicyDefinitions
2016-04-20 18:52:26 ----D---- C:\WINDOWS\SoftwareDistribution
2016-04-20 17:29:19 ----D---- C:\WINDOWS\debug
2016-04-19 04:04:45 ----D---- C:\Users\Ouki\AppData\Roaming\MPC-HC
2016-04-16 00:53:42 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-04-16 00:53:06 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-04-16 00:52:48 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-04-16 00:52:10 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-04-13 00:24:54 ----D---- C:\ProgramData\Skype
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2015-06-23 1455552]
R1 BfLwf;@oem5.inf,%BfLwf_Desc%;KIller Bandwidth Control; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [2015-07-07 114736]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys [2016-03-10 57536]
R2 iocbios2;iocbios2; \??\C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [2015-05-28 30224]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 athur;@oem20.inf,%ATHR.Service.DispName%;Wireless Network Adapter Service; C:\WINDOWS\System32\drivers\athurx.sys [2010-01-05 1847296]
R3 dtlitescsibus;@oem8.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2015-09-09 30264]
R3 I2cHkBurn;I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [2015-07-27 41760]
R3 ICCWDT;@oem43.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2015-09-24 38680]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-10-16 4628736]
R3 ISCT;@oem11.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD.sys [2014-05-27 44744]
R3 KillerEth;@oem16.inf,%RIVET.Service.DispName%;NDIS Miniport Driver for Killer e2200 PCI-E Ehternet Controller; C:\WINDOWS\System32\drivers\e22w10x64.sys [2015-04-27 124464]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2015-10-16 41088]
R3 MEIx64;@oem38.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2015-07-07 184608]
R3 NTIOLib_MSI_RAID;NTIOLib_MSI_RAID; \??\C:\MSI\Smart Utilities\NTIOLib_X64.sys [2014-03-17 13808]
R3 NTIOLib_MSIDDR_CC;NTIOLib_MSIDDR_CC; \??\C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [2012-11-26 13368]
R3 NVHDA;@oem28.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-12-16 205456]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-04-28 12631616]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-05-02 28216]
R3 nvvad_WaveExtensible;@oem36.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-04-14 56384]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-01-26 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 hidusbf;USB Mouse Rate Adjuster Lower Filter by SweetLow; C:\WINDOWS\system32\DRIVERS\hidusbf.sys [2009-02-11 6784]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\e22w7x64.sys [2013-05-07 165824]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2016-03-10 27008]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2016-03-10 65408]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NTIOLib_MB;NTIOLib_MB; \??\C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [2014-03-13 13808]
S3 NTIOLib_MSIRatio_CC;NTIOLib_MSIRatio_CC; \??\C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [2012-11-20 13368]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2015-09-08 452240]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-04-23 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-03-29 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-04-23 131424]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-04-29 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-04-29 1773696]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [2015-12-16 37328]
R2 GamingHotkey_Service;GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2015-10-16 2019792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-05-02 1165368]
R2 Killer Service V2;Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [2015-07-07 402432]
R2 MSI_FastBoot;MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [2015-06-04 105296]
R2 MSI_LiveUpdate_Service;MSI Live Update Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2016-04-28 2248144]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2015-05-18 163280]
R2 MSICTL_CC;MSI Command Center control Service; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2016-03-04 2014160]
R2 MSIDDR_CC;MSI Command Center DDR Service; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2016-03-25 2317264]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-05-02 1881144]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-05-02 2522680]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-04-27 1265720]
R2 OneSyncSvc_4ac71;Hostitel synchronizace_4ac71; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-04-27 424384]
R2 SuperRAIDSvc;SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [2015-02-09 29648]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-06-24 171480]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-05-02 3634232]
R3 PimIndexMaintenanceSvc_4ac71;Data kontaktů_4ac71; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-04-30 835664]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2016-03-10 1136608]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2016-03-10 1514464]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-07 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-09-08 194032]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4ac71;Služba zasílání zpráv_4ac71; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-26 149160]
S3 MSIClock_CC;MSI Command Center Clock Service; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [2016-02-04 4162512]
S3 MSICOMM_CC;MSI Command Center Comm Service; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2016-02-01 2200872]
S3 MSICPU_CC;MSI Command Center CPU Service; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [2016-02-04 4162512]
S3 MSISMB_CC;MSI Command Center SMBus Service; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2016-02-04 2073040]
S3 MSISuperIO_CC;MSI Command Center SuperIO Service; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2016-02-01 596944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu mám hroznou odezvu na internetu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o kontrolu mám hroznou odezvu na internetu
A omlouvám se, že se téma vytvořilo 2x, ale to nějak samo. Po kliknutí na odeslat.
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Zdravím!
Spusťte tuto utiltitu:
Spusťte tuto utiltitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Zde je Log
# AdwCleaner v5.116 - Log soubor vytvořen 12/05/2016 o 19:58:32
# Aktualizováno 09/05/2016 by Xplode
# Databáze : 2016-05-09.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : Ouki - OUKI-PC
# Spuštěno z : C:\Users\Ouki\Desktop\adwcleaner_5.116.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
[-] Složka smazáno : C:\Users\Ouki\AppData\Roaming\RHEng
***** [ Soubory ] *****
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
***** [ Registr ] *****
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
***** [ Webové prohlížeče ] *****
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [1120 bytes] - [12/05/2016 19:58:32]
C:\AdwCleaner\AdwCleaner[R0].txt - [11907 bytes] - [20/12/2014 00:40:35]
C:\AdwCleaner\AdwCleaner[R1].txt - [1123 bytes] - [20/12/2014 00:46:41]
C:\AdwCleaner\AdwCleaner[S0].txt - [11838 bytes] - [20/12/2014 00:43:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [1368 bytes] - [12/05/2016 19:43:50]
C:\AdwCleaner\AdwCleaner[S2].txt - [1439 bytes] - [12/05/2016 19:57:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1560 bytes] ##########
# AdwCleaner v5.116 - Log soubor vytvořen 12/05/2016 o 19:58:32
# Aktualizováno 09/05/2016 by Xplode
# Databáze : 2016-05-09.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : Ouki - OUKI-PC
# Spuštěno z : C:\Users\Ouki\Desktop\adwcleaner_5.116.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
[-] Složka smazáno : C:\Users\Ouki\AppData\Roaming\RHEng
***** [ Soubory ] *****
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
***** [ Registr ] *****
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
***** [ Webové prohlížeče ] *****
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [1120 bytes] - [12/05/2016 19:58:32]
C:\AdwCleaner\AdwCleaner[R0].txt - [11907 bytes] - [20/12/2014 00:40:35]
C:\AdwCleaner\AdwCleaner[R1].txt - [1123 bytes] - [20/12/2014 00:46:41]
C:\AdwCleaner\AdwCleaner[S0].txt - [11838 bytes] - [20/12/2014 00:43:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [1368 bytes] - [12/05/2016 19:43:50]
C:\AdwCleaner\AdwCleaner[S2].txt - [1439 bytes] - [12/05/2016 19:57:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1560 bytes] ##########
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Zde log z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
Ran by Ouki (administrator) on OUKI-PC (12-05-2016 20:19:20)
Running from C:\Users\Ouki\Desktop
Loaded Profiles: Ouki (Available Profiles: Ouki)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Micro-Star INT'L CO., LTD.) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
() C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
(Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Ouki\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8725248 2015-10-16] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1027024 2015-09-09] (MSI)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [830416 2016-02-16] (MSI)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [11336656 2016-04-28] (Micro-Star INT'L CO., LTD.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-09-08] (Google Inc.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [uTorrent] => C:\Users\Ouki\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-07] (BitTorrent Inc.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50676864 2016-03-01] (Skype Technologies S.A.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [18923008 2015-06-16] ()
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {1d5f019f-725d-11e5-8817-d43d7ef31cbe} - "G:\LGAutoRun.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {8ca56aed-5685-11e5-8804-d43d7ef31cbe} - "E:\setup.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {d389d061-5aa0-11e5-8808-d43d7ef31cbe} - "F:\setup.exe"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-09-08]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{093839cf-9d64-4271-81cc-e090d0def43b}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Internet Explorer:
==================
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-04-03] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-03] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1567744305-3254084915-3206558403-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Ouki\AppData\Roaming\Mozilla\Firefox\Profiles\um1yecr2.default
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-04-29]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Raga Minions) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpbgabjholejmobhphlgljhhobcjbnep [2016-05-09]
CHR Extension: (AdBlock) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [37328 2015-12-16] (Micro-Star Int'l Co., Ltd.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [402432 2015-07-07] (Rivet Networks) [File not signed]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4162512 2016-02-04] (MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2200872 2016-02-01] (MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4162512 2016-02-04] (MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2013648 2016-02-16] (MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2312144 2016-02-22] (MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2073040 2016-02-04] (MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [596944 2016-02-01] (MSI)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2248144 2016-04-28] (Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [163280 2015-05-18] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2015-02-09] (Micro-Star INT'L CO., LTD.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19216 2015-07-07] (Intel(R) Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [114736 2015-07-07] (Rivet Networks, LLC.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-09] (Disc Soft Ltd)
S3 hidusbf; C:\Windows\system32\DRIVERS\hidusbf.sys [6784 2009-02-11] (SweetLow) [File not signed]
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] ()
S3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [165824 2013-05-07] (Qualcomm Atheros, Inc.)
R3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [124464 2015-04-27] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MB; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [13808 2014-03-13] (MSI)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 XSplit_Dummy; C:\Windows\system32\drivers\xspltspk.sys [26200 2015-05-26] (SplitmediaLabs Limited)
R3 XtuAcpiDriver; C:\Windows\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-24] (Intel Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:19 - 2016-05-12 20:19 - 00018207 _____ C:\Users\Ouki\Desktop\FRST.txt
2016-05-12 20:18 - 2016-05-12 20:19 - 00000000 ____D C:\FRST
2016-05-12 20:16 - 2016-05-12 20:18 - 00112640 _____ (forum.viry.cz) C:\Users\Ouki\Desktop\FRSTLauncher.exe
2016-05-12 20:14 - 2016-05-12 20:15 - 02381312 _____ (Farbar) C:\Users\Ouki\Desktop\FRST64.exe
2016-05-12 19:42 - 2016-05-12 19:43 - 03640384 _____ C:\Users\Ouki\Desktop\adwcleaner_5.116.exe
2016-05-12 19:27 - 2016-05-12 19:27 - 00002032 _____ C:\Users\Public\Desktop\MSI Live Update 6.lnk
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2015
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 18:56 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 18:56 - 00000000 ____D C:\Users\Ouki\AppData\LocalLow\Spyware Terminator
2016-05-12 18:37 - 2016-05-12 18:53 - 27356692 _____ C:\Users\Ouki\Downloads\f-secure-anti-virus-for-mac.mpkg
2016-05-12 18:37 - 2016-05-12 18:37 - 00000000 ____D C:\ProgramData\Avira
2016-05-12 18:37 - 2016-05-12 18:37 - 00000000 ____D C:\Program Files (x86)\Avira
2016-05-12 18:18 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\trend micro
2016-05-12 03:47 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-12 03:47 - 2016-05-12 03:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-05 14:32 - 2016-05-05 14:32 - 00152124 _____ C:\Users\Ouki\Downloads\Reforgenator-v1.3.11.zip
2016-05-05 03:24 - 2016-05-12 17:32 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\VMware
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\VMware
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\Bonjour
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-05-05 03:23 - 2016-05-05 03:24 - 00000000 ____D C:\Program Files (x86)\VMware
2016-05-05 03:23 - 2016-05-05 03:23 - 00000000 ____D C:\ProgramData\Apple
2016-05-05 03:23 - 2016-05-05 03:23 - 00000000 ____D C:\Program Files\Common Files\VMware
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Andy
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\Andy
2016-05-05 03:21 - 2016-05-05 03:21 - 00000000 ____D C:\Users\Ouki\Andy
2016-05-04 23:48 - 2016-05-04 23:48 - 00004673 _____ C:\Users\Ouki\Downloads\XeqtR (1).zip
2016-05-04 23:44 - 2016-05-04 23:44 - 00004673 _____ C:\Users\Ouki\Downloads\XeqtR.zip
2016-04-25 20:53 - 2016-04-25 20:53 - 00000000 ____D C:\Users\Ouki\AppData\Local\ElevatedDiagnostics
2016-04-25 18:30 - 2016-04-25 18:31 - 04280320 _____ C:\Users\Ouki\Downloads\Until.Dawn.2015.-PC.iso
2016-04-22 20:22 - 2016-04-22 20:22 - 02921543 _____ C:\Users\Ouki\Downloads\received_10205850576448855 (1).mp4
2016-04-22 20:15 - 2016-04-22 20:15 - 02921543 _____ C:\Users\Ouki\Downloads\received_10205850576448855.mp4
2016-04-19 00:18 - 2016-04-19 00:18 - 00987728 _____ (Google Inc.) C:\Users\Ouki\Downloads\ChromeSetup (1).exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:20 - 2015-11-24 00:33 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Battle.net
2016-05-12 20:20 - 2015-10-30 20:35 - 00000000 ____D C:\WINDOWS\ShellNew
2016-05-12 20:20 - 2015-10-30 20:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\Nui
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SystemResources
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\L2Schemas
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Help
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Globalization
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-05-12 20:20 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-05-12 20:20 - 2015-09-13 20:51 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Winamp
2016-05-12 20:20 - 2015-09-08 15:28 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel
2016-05-12 20:20 - 2015-09-08 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-05-12 20:20 - 2015-09-08 02:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 20:19 - 2016-03-29 06:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan
2016-05-12 20:19 - 2016-03-13 21:44 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-05-12 20:19 - 2016-01-26 10:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-12 20:19 - 2015-11-24 00:43 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-05-12 20:19 - 2015-11-24 00:33 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-05-12 20:19 - 2015-09-15 09:30 - 00000000 ____D C:\Program Files (x86)\Grand Theft Auto V
2016-05-12 20:19 - 2015-09-08 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-12 20:19 - 2015-09-08 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-12 20:19 - 2015-09-08 16:15 - 00000000 ____D C:\ProgramData\Oracle
2016-05-12 20:19 - 2015-09-08 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI(R) Intel(R) Extreme Tuning Utility
2016-05-12 20:19 - 2015-09-08 15:20 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-12 20:19 - 2014-03-21 18:02 - 00000000 ____D C:\uninstall
2016-05-12 20:18 - 2016-03-21 01:08 - 00004030 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-05-12 20:18 - 2016-03-21 01:08 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-05-12 20:18 - 2016-03-21 01:08 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-05-12 20:18 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-12 20:17 - 2016-01-05 12:17 - 00000000 ____D C:\Users\Ouki\AppData\Local\CrashDumps
2016-05-12 20:17 - 2015-09-08 16:21 - 00004194 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3B17157C-DD68-4306-9E60-456DBCBF483F}
2016-05-12 20:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration
2016-05-12 20:11 - 2015-12-02 22:20 - 00000000 ____D C:\Users\Ouki\Counter-Strike 1.6 Fusion
2016-05-12 20:11 - 2015-09-08 15:05 - 00000000 ____D C:\Users\Ouki\AppData\Local\Packages
2016-05-12 20:10 - 2016-01-26 10:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-12 20:10 - 2015-09-14 08:40 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Skype
2016-05-12 20:10 - 2015-09-08 16:13 - 00000000 ____D C:\Users\Ouki\AppData\Local\Mozilla
2016-05-12 20:09 - 2015-11-02 19:35 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\TS3Client
2016-05-12 20:09 - 2015-09-14 08:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-12 20:08 - 2015-09-08 16:37 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-12 20:08 - 2014-12-20 00:40 - 00000000 ____D C:\AdwCleaner
2016-05-12 20:06 - 2015-10-30 20:31 - 00750030 _____ C:\WINDOWS\system32\perfh005.dat
2016-05-12 20:06 - 2015-10-30 20:31 - 00150654 _____ C:\WINDOWS\system32\perfc005.dat
2016-05-12 20:06 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-05-12 20:06 - 2015-09-08 15:08 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-12 20:05 - 2015-09-09 19:47 - 00000000 ____D C:\Program Files (x86)\Opera
2016-05-12 20:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-05-12 20:03 - 2015-09-09 01:37 - 00000000 ____D C:\Program Files (x86)\Steam
2016-05-12 20:02 - 2016-04-09 04:02 - 00001600 _____ C:\Users\Ouki\Desktop\lol.txt
2016-05-12 20:02 - 2015-09-09 02:33 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\uTorrent
2016-05-12 20:00 - 2016-01-26 11:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-05-12 20:00 - 2016-01-26 10:56 - 00000000 ____D C:\Users\Ouki
2016-05-12 19:59 - 2016-01-26 10:53 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-12 19:59 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-05-12 19:29 - 2015-11-02 19:35 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-05-12 19:28 - 2015-09-08 15:27 - 00004034 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-12 19:28 - 2015-09-08 15:27 - 00003802 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-12 19:28 - 2015-09-08 15:27 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-12 19:28 - 2015-09-08 15:27 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-12 19:27 - 2015-09-08 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2016-05-12 19:27 - 2015-09-08 15:17 - 00000000 ____D C:\Program Files (x86)\MSI
2016-05-12 19:27 - 2014-03-11 17:43 - 00000000 ____D C:\MSI
2016-05-12 19:23 - 2015-09-08 17:46 - 00000000 ____D C:\Users\Ouki\AppData\Local\NVIDIA
2016-05-12 18:23 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-05-11 12:01 - 2015-09-08 11:03 - 00000000 ____D C:\Users\Ouki\.oracle_jre_usage
2016-05-11 00:24 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-05-11 00:22 - 2015-09-08 18:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-10 10:29 - 2015-10-21 07:55 - 00000000 ____D C:\WINDOWS\SysWOW64\LiveUpdate
2016-05-03 02:05 - 2015-11-24 00:33 - 00000000 ____D C:\Users\Ouki\AppData\Local\Battle.net
2016-04-25 18:14 - 2015-09-08 02:44 - 00000000 ___RD C:\Users\Ouki\OneDrive
2016-04-22 09:57 - 2015-09-08 18:05 - 00453288 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-04-19 04:04 - 2015-09-17 23:37 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\MPC-HC
2016-04-15 00:30 - 2016-03-21 01:04 - 00003954 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1441820880
2016-04-15 00:30 - 2015-09-09 19:48 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-04-13 00:24 - 2015-09-14 08:40 - 00000000 ____D C:\ProgramData\Skype
==================== Files in the root of some directories =======
2015-09-10 00:31 - 2015-09-10 00:31 - 0000000 ___SH () C:\Users\Ouki\AppData\Local\LumaEmu
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_242_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Ouki\Desktop" je 1228 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
Ran by Ouki (administrator) on OUKI-PC (12-05-2016 20:19:20)
Running from C:\Users\Ouki\Desktop
Loaded Profiles: Ouki (Available Profiles: Ouki)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Micro-Star INT'L CO., LTD.) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
() C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
(Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Ouki\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8725248 2015-10-16] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1027024 2015-09-09] (MSI)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [830416 2016-02-16] (MSI)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [11336656 2016-04-28] (Micro-Star INT'L CO., LTD.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-09-08] (Google Inc.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [uTorrent] => C:\Users\Ouki\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-07] (BitTorrent Inc.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50676864 2016-03-01] (Skype Technologies S.A.)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [18923008 2015-06-16] ()
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {1d5f019f-725d-11e5-8817-d43d7ef31cbe} - "G:\LGAutoRun.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {8ca56aed-5685-11e5-8804-d43d7ef31cbe} - "E:\setup.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {d389d061-5aa0-11e5-8808-d43d7ef31cbe} - "F:\setup.exe"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-09-08]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{093839cf-9d64-4271-81cc-e090d0def43b}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Internet Explorer:
==================
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-04-03] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-03] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1567744305-3254084915-3206558403-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Ouki\AppData\Roaming\Mozilla\Firefox\Profiles\um1yecr2.default
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-04-29]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Raga Minions) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpbgabjholejmobhphlgljhhobcjbnep [2016-05-09]
CHR Extension: (AdBlock) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ouki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [37328 2015-12-16] (Micro-Star Int'l Co., Ltd.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [402432 2015-07-07] (Rivet Networks) [File not signed]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4162512 2016-02-04] (MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2200872 2016-02-01] (MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4162512 2016-02-04] (MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2013648 2016-02-16] (MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2312144 2016-02-22] (MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2073040 2016-02-04] (MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [596944 2016-02-01] (MSI)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2248144 2016-04-28] (Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [163280 2015-05-18] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2015-02-09] (Micro-Star INT'L CO., LTD.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19216 2015-07-07] (Intel(R) Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [114736 2015-07-07] (Rivet Networks, LLC.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-09] (Disc Soft Ltd)
S3 hidusbf; C:\Windows\system32\DRIVERS\hidusbf.sys [6784 2009-02-11] (SweetLow) [File not signed]
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] ()
S3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [165824 2013-05-07] (Qualcomm Atheros, Inc.)
R3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [124464 2015-04-27] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MB; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [13808 2014-03-13] (MSI)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 XSplit_Dummy; C:\Windows\system32\drivers\xspltspk.sys [26200 2015-05-26] (SplitmediaLabs Limited)
R3 XtuAcpiDriver; C:\Windows\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-24] (Intel Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:19 - 2016-05-12 20:19 - 00018207 _____ C:\Users\Ouki\Desktop\FRST.txt
2016-05-12 20:18 - 2016-05-12 20:19 - 00000000 ____D C:\FRST
2016-05-12 20:16 - 2016-05-12 20:18 - 00112640 _____ (forum.viry.cz) C:\Users\Ouki\Desktop\FRSTLauncher.exe
2016-05-12 20:14 - 2016-05-12 20:15 - 02381312 _____ (Farbar) C:\Users\Ouki\Desktop\FRST64.exe
2016-05-12 19:42 - 2016-05-12 19:43 - 03640384 _____ C:\Users\Ouki\Desktop\adwcleaner_5.116.exe
2016-05-12 19:27 - 2016-05-12 19:27 - 00002032 _____ C:\Users\Public\Desktop\MSI Live Update 6.lnk
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2015
2016-05-12 18:56 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 18:56 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Spyware Terminator
2016-05-12 18:56 - 2016-05-12 18:56 - 00000000 ____D C:\Users\Ouki\AppData\LocalLow\Spyware Terminator
2016-05-12 18:37 - 2016-05-12 18:53 - 27356692 _____ C:\Users\Ouki\Downloads\f-secure-anti-virus-for-mac.mpkg
2016-05-12 18:37 - 2016-05-12 18:37 - 00000000 ____D C:\ProgramData\Avira
2016-05-12 18:37 - 2016-05-12 18:37 - 00000000 ____D C:\Program Files (x86)\Avira
2016-05-12 18:18 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\trend micro
2016-05-12 03:47 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-12 03:47 - 2016-05-12 03:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-05 14:32 - 2016-05-05 14:32 - 00152124 _____ C:\Users\Ouki\Downloads\Reforgenator-v1.3.11.zip
2016-05-05 03:24 - 2016-05-12 17:32 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\VMware
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\ProgramData\VMware
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\Bonjour
2016-05-05 03:23 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-05-05 03:23 - 2016-05-05 03:24 - 00000000 ____D C:\Program Files (x86)\VMware
2016-05-05 03:23 - 2016-05-05 03:23 - 00000000 ____D C:\ProgramData\Apple
2016-05-05 03:23 - 2016-05-05 03:23 - 00000000 ____D C:\Program Files\Common Files\VMware
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Andy
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 03:21 - 2016-05-12 20:19 - 00000000 ____D C:\Program Files\Andy
2016-05-05 03:21 - 2016-05-05 03:21 - 00000000 ____D C:\Users\Ouki\Andy
2016-05-04 23:48 - 2016-05-04 23:48 - 00004673 _____ C:\Users\Ouki\Downloads\XeqtR (1).zip
2016-05-04 23:44 - 2016-05-04 23:44 - 00004673 _____ C:\Users\Ouki\Downloads\XeqtR.zip
2016-04-25 20:53 - 2016-04-25 20:53 - 00000000 ____D C:\Users\Ouki\AppData\Local\ElevatedDiagnostics
2016-04-25 18:30 - 2016-04-25 18:31 - 04280320 _____ C:\Users\Ouki\Downloads\Until.Dawn.2015.-PC.iso
2016-04-22 20:22 - 2016-04-22 20:22 - 02921543 _____ C:\Users\Ouki\Downloads\received_10205850576448855 (1).mp4
2016-04-22 20:15 - 2016-04-22 20:15 - 02921543 _____ C:\Users\Ouki\Downloads\received_10205850576448855.mp4
2016-04-19 00:18 - 2016-04-19 00:18 - 00987728 _____ (Google Inc.) C:\Users\Ouki\Downloads\ChromeSetup (1).exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:20 - 2015-11-24 00:33 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Battle.net
2016-05-12 20:20 - 2015-10-30 20:35 - 00000000 ____D C:\WINDOWS\ShellNew
2016-05-12 20:20 - 2015-10-30 20:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\Nui
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SystemResources
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\L2Schemas
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Help
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Globalization
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-05-12 20:20 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-05-12 20:20 - 2015-09-13 20:51 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Winamp
2016-05-12 20:20 - 2015-09-08 15:28 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel
2016-05-12 20:20 - 2015-09-08 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-05-12 20:20 - 2015-09-08 02:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 20:19 - 2016-03-29 06:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan
2016-05-12 20:19 - 2016-03-13 21:44 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-05-12 20:19 - 2016-01-26 10:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-12 20:19 - 2015-11-24 00:43 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-05-12 20:19 - 2015-11-24 00:33 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-05-12 20:19 - 2015-09-15 09:30 - 00000000 ____D C:\Program Files (x86)\Grand Theft Auto V
2016-05-12 20:19 - 2015-09-08 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-12 20:19 - 2015-09-08 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-12 20:19 - 2015-09-08 16:15 - 00000000 ____D C:\ProgramData\Oracle
2016-05-12 20:19 - 2015-09-08 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI(R) Intel(R) Extreme Tuning Utility
2016-05-12 20:19 - 2015-09-08 15:20 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-12 20:19 - 2014-03-21 18:02 - 00000000 ____D C:\uninstall
2016-05-12 20:18 - 2016-03-21 01:08 - 00004030 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-05-12 20:18 - 2016-03-21 01:08 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-05-12 20:18 - 2016-03-21 01:08 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-05-12 20:18 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-12 20:17 - 2016-01-05 12:17 - 00000000 ____D C:\Users\Ouki\AppData\Local\CrashDumps
2016-05-12 20:17 - 2015-09-08 16:21 - 00004194 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3B17157C-DD68-4306-9E60-456DBCBF483F}
2016-05-12 20:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration
2016-05-12 20:11 - 2015-12-02 22:20 - 00000000 ____D C:\Users\Ouki\Counter-Strike 1.6 Fusion
2016-05-12 20:11 - 2015-09-08 15:05 - 00000000 ____D C:\Users\Ouki\AppData\Local\Packages
2016-05-12 20:10 - 2016-01-26 10:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-12 20:10 - 2015-09-14 08:40 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\Skype
2016-05-12 20:10 - 2015-09-08 16:13 - 00000000 ____D C:\Users\Ouki\AppData\Local\Mozilla
2016-05-12 20:09 - 2015-11-02 19:35 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\TS3Client
2016-05-12 20:09 - 2015-09-14 08:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-12 20:08 - 2015-09-08 16:37 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-12 20:08 - 2014-12-20 00:40 - 00000000 ____D C:\AdwCleaner
2016-05-12 20:06 - 2015-10-30 20:31 - 00750030 _____ C:\WINDOWS\system32\perfh005.dat
2016-05-12 20:06 - 2015-10-30 20:31 - 00150654 _____ C:\WINDOWS\system32\perfc005.dat
2016-05-12 20:06 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-05-12 20:06 - 2015-09-08 15:08 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-12 20:05 - 2015-09-09 19:47 - 00000000 ____D C:\Program Files (x86)\Opera
2016-05-12 20:04 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-05-12 20:03 - 2015-09-09 01:37 - 00000000 ____D C:\Program Files (x86)\Steam
2016-05-12 20:02 - 2016-04-09 04:02 - 00001600 _____ C:\Users\Ouki\Desktop\lol.txt
2016-05-12 20:02 - 2015-09-09 02:33 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\uTorrent
2016-05-12 20:00 - 2016-01-26 11:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-05-12 20:00 - 2016-01-26 10:56 - 00000000 ____D C:\Users\Ouki
2016-05-12 19:59 - 2016-01-26 10:53 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-12 19:59 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-05-12 19:29 - 2015-11-02 19:35 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-05-12 19:28 - 2015-09-08 15:27 - 00004034 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-12 19:28 - 2015-09-08 15:27 - 00003802 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-12 19:28 - 2015-09-08 15:27 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-12 19:28 - 2015-09-08 15:27 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-12 19:27 - 2015-09-08 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2016-05-12 19:27 - 2015-09-08 15:17 - 00000000 ____D C:\Program Files (x86)\MSI
2016-05-12 19:27 - 2014-03-11 17:43 - 00000000 ____D C:\MSI
2016-05-12 19:23 - 2015-09-08 17:46 - 00000000 ____D C:\Users\Ouki\AppData\Local\NVIDIA
2016-05-12 18:23 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-05-11 12:01 - 2015-09-08 11:03 - 00000000 ____D C:\Users\Ouki\.oracle_jre_usage
2016-05-11 00:24 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-05-11 00:22 - 2015-09-08 18:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-10 10:29 - 2015-10-21 07:55 - 00000000 ____D C:\WINDOWS\SysWOW64\LiveUpdate
2016-05-03 02:05 - 2015-11-24 00:33 - 00000000 ____D C:\Users\Ouki\AppData\Local\Battle.net
2016-04-25 18:14 - 2015-09-08 02:44 - 00000000 ___RD C:\Users\Ouki\OneDrive
2016-04-22 09:57 - 2015-09-08 18:05 - 00453288 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-04-19 04:04 - 2015-09-17 23:37 - 00000000 ____D C:\Users\Ouki\AppData\Roaming\MPC-HC
2016-04-15 00:30 - 2016-03-21 01:04 - 00003954 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1441820880
2016-04-15 00:30 - 2015-09-09 19:48 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-04-13 00:24 - 2015-09-14 08:40 - 00000000 ____D C:\ProgramData\Skype
==================== Files in the root of some directories =======
2015-09-10 00:31 - 2015-09-10 00:31 - 0000000 ___SH () C:\Users\Ouki\AppData\Local\LumaEmu
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_242_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Ouki\Desktop" je 1228 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
- Přílohy
-
- Addition.rar
- (4.73 KiB) Staženo 40 x
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-09-08] (Google Inc.)
C:\Program Files (x86)\Google\GoogleToolbarNotifier
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {1d5f019f-725d-11e5-8817-d43d7ef31cbe} - "G:\LGAutoRun.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {8ca56aed-5685-11e5-8804-d43d7ef31cbe} - "E:\setup.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {d389d061-5aa0-11e5-8808-d43d7ef31cbe} - "F:\setup.exe"
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1567744305-3254084915-3206558403-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
Task: {8FDAF981-5644-4AB3-994C-D71BE3B7BF8F} - System32\Tasks\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7} => launchwinapp.exe hxxp://ui.skype.com/ui/0/7.17.85.106/cs/abandoninstall?page=tsBing
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Fix result of Farbar Recovery Scan Tool (x64) Version:09-05-2016
Ran by Ouki (2016-05-12 21:13:13) Run:1
Running from C:\Users\Ouki\Desktop
Loaded Profiles: Ouki (Available Profiles: Ouki)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-09-08] (Google Inc.)
C:\Program Files (x86)\Google\GoogleToolbarNotifier
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {1d5f019f-725d-11e5-8817-d43d7ef31cbe} - "G:\LGAutoRun.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {8ca56aed-5685-11e5-8804-d43d7ef31cbe} - "E:\setup.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {d389d061-5aa0-11e5-8808-d43d7ef31cbe} - "F:\setup.exe"
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1567744305-3254084915-3206558403-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
Task: {8FDAF981-5644-4AB3-994C-D71BE3B7BF8F} - System32\Tasks\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7} => launchwinapp.exe hxxp://ui.skype.com/ui/0/7.17.85.106/cs ... age=tsBing
End
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => value removed successfully
C:\Program Files (x86)\Google\GoogleToolbarNotifier => moved successfully
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1d5f019f-725d-11e5-8817-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{1d5f019f-725d-11e5-8817-d43d7ef31cbe} => key not found.
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8ca56aed-5685-11e5-8804-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{8ca56aed-5685-11e5-8804-d43d7ef31cbe} => key not found.
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d389d061-5aa0-11e5-8808-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{d389d061-5aa0-11e5-8808-d43d7ef31cbe} => key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
C:\Program Files (x86)\Google\Google Toolbar => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\Wow6432Node\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
"C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => not found.
c2cautoupdatesvc => Unable to stop service.
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => Unable to stop service.
c2cpnrsvc => service removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FDAF981-5644-4AB3-994C-D71BE3B7BF8F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FDAF981-5644-4AB3-994C-D71BE3B7BF8F}" => key removed successfully
C:\WINDOWS\System32\Tasks\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7}" => key removed successfully
The system needed a reboot.
==== End of Fixlog 21:13:24 ====
Ran by Ouki (2016-05-12 21:13:13) Run:1
Running from C:\Users\Ouki\Desktop
Loaded Profiles: Ouki (Available Profiles: Ouki)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-09-08] (Google Inc.)
C:\Program Files (x86)\Google\GoogleToolbarNotifier
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {1d5f019f-725d-11e5-8817-d43d7ef31cbe} - "G:\LGAutoRun.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {8ca56aed-5685-11e5-8804-d43d7ef31cbe} - "E:\setup.exe"
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\...\MountPoints2: {d389d061-5aa0-11e5-8808-d43d7ef31cbe} - "F:\setup.exe"
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1567744305-3254084915-3206558403-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
Task: {8FDAF981-5644-4AB3-994C-D71BE3B7BF8F} - System32\Tasks\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7} => launchwinapp.exe hxxp://ui.skype.com/ui/0/7.17.85.106/cs ... age=tsBing
End
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => value removed successfully
C:\Program Files (x86)\Google\GoogleToolbarNotifier => moved successfully
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1d5f019f-725d-11e5-8817-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{1d5f019f-725d-11e5-8817-d43d7ef31cbe} => key not found.
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8ca56aed-5685-11e5-8804-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{8ca56aed-5685-11e5-8804-d43d7ef31cbe} => key not found.
"HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d389d061-5aa0-11e5-8808-d43d7ef31cbe}" => key removed successfully
HKCR\CLSID\{d389d061-5aa0-11e5-8808-d43d7ef31cbe} => key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
C:\Program Files (x86)\Google\Google Toolbar => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\Wow6432Node\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
HKU\S-1-5-21-1567744305-3254084915-3206558403-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
"C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => not found.
c2cautoupdatesvc => Unable to stop service.
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => Unable to stop service.
c2cpnrsvc => service removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FDAF981-5644-4AB3-994C-D71BE3B7BF8F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FDAF981-5644-4AB3-994C-D71BE3B7BF8F}" => key removed successfully
C:\WINDOWS\System32\Tasks\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6A2F12A6-7CE1-4CA0-A5E2-CCDECDB39AF7}" => key removed successfully
The system needed a reboot.
==== End of Fixlog 21:13:24 ====
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu mám hroznou odezvu na internetu
No řekl bych, že jo krom toho připojení k internetu. Stím je to pořád na štíru.
Ale to bude asi problém providera. Ale tak ani tak nebylo na škodu projít si počítač scanem.
Očividně tam nějaká havěť byla díky moc.
Ale to bude asi problém providera. Ale tak ani tak nebylo na škodu projít si počítač scanem.
Očividně tam nějaká havěť byla díky moc.
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Zkuste ještě restartovat modem, příp. další síť prvek v datové cestě. Občas to pomůže.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu mám hroznou odezvu na internetu
To jsem už zkoušel;) Nic nepomohlo. Třeba se to časem umoudíř, ale i tak děkuji na sto tisíckrát;)
-
Rudy
- Site Admin
- Příspěvky: 119390
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu mám hroznou odezvu na internetu
Rádo se stalo! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?