Funkčnost snad všeho - nové PC

Zpráva

Sleseleseleci · #1 Příspěvek od **Sleseleseleci** » 28 zář 2017 18:50

Zdravím Vás.

Mám pocit jakoby počítač fungoval vždy jen chvíli. Nejdřív bych mohl mluvit jen o internetu, ale teď i spustit aplikaci v počítači bývá problém.
Neustále mě počítač vyzývá k restartu, internet se kousne, že ani relogin nepomůže, jen restart počítače. K tomu mě to neustále vybízí.

Jak se kousne net, kolikrát ani aplikace aj. nedělájí, co májí, složky otevřít pomalu problém. Ani RSIT mi na poprvé nevyšlo.

Po startu počítače vyskakuje přiložené okno, pokaždé a vždy.

Přeji hezký den,
Sle.

LOG z RSIT:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Sle at 2017-09-28 19:39:14
Microsoft Windows 10 Home
System drive C: has 879 GB (96%) free of 912 GB
Total RAM: 7568 MB (73% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:39:24, on 28.09.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0608)
Boot mode: Normal

Running processes:
C:\Program Files\Conexant\SAII\SmartAudio.exe
C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe
C:\Program Files\trend micro\Sle_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo17win10.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo17win10.msn.com/?pc=LCTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Canon Toner Status] C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - http://www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: CxUtilSvc - Conexant Systems, Inc. - C:\Program Files\Conexant\SAII\CxUtilSvc.exe
O23 - Service: Dolby DAX2 API Service (DAX2API) - Unknown owner - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GDCAgent - Lenovo - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @oem5.inf,%BtDevMan.SvcDesc%;Realtek Bluetooth Device Manager Service (RtkBtManServ) - Realtek Semiconductor Corp. - C:\WINDOWS\RtkBtManServ.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Unknown owner - C:\Windows\system32\SAsrv.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8124 bytes

====== Enumerating Processes ======

C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\fontdrvhost.exe
C:\WINDOWS\system32\fontdrvhost.exe
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
C:\WINDOWS\system32\dwm.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k localservice -s bthserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-90935f35-e4b4-47cc-aeea-ba428b0b9f62 -SystemEventPortName:HostProcess-fbf642ff-54c7-4e06-a650-62ff23e5a627 -IoCancelEventPortName:HostProcess-120d27d5-eb8a-4f0b-8755-e050ceb32993 -NonStateChangingEventPortName:HostProcess-712fb59b-88ee-4c54-8b11-685052828a38 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:bf518107-b8ba-4496-b7f0-47c287072c47 -DeviceGroupId:WudfDefaultDevicePool
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
C:\WINDOWS\system32\dashost.exe
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k localservice -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
C:\WINDOWS\system32\atiesrxx.exe
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
C:\WINDOWS\system32\atieclxx.exe
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k localservice -s netprofm
c:\windows\system32\svchost.exe -k netsvcs -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
C:\WINDOWS\system32\WLANExt.exe 1363528515344
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localservicenonetwork
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\SAsrv.exe"
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files\Conexant\SAII\CxUtilSvc.exe"
C:\WINDOWS\RtkBtManServ.exe
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer
c:\windows\system32\svchost.exe -k dcomlaunch -s DeviceInstall
C:\Program Files\AMD\amdkmpfd_un\atieclxx.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
c:\windows\system32\sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
c:\windows\system32\taskhostw.exe
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
C:\WINDOWS\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
"C:\Program Files\Conexant\SAII\SmartAudio.exe" /c
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Canon\Canon MF Network Scanner Selector\CMFNSS6.EXE"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
c:\windows\system32\svchost.exe -k localservice -s SstpSvc
c:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts
c:\windows\system32\svchost.exe -k netsvcs -s Browser
"C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe"
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Sle\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Sle\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=61.0.3163.100 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffa665a1988,0x7ffa665a1948,0x7ffa665a1958
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=7064 --on-initialized-event-handle=628 --parent-handle=632 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1540,323888595786725746,10658634873860882194,131072 --supports-dual-gpus=false --gpu-driver-bug-workarounds=9,12,23,24,27,32,49,84 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x1002 --gpu-device-id=0x9874 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=21.19.144.1281 --gpu-driver-date=12-16-2016 --gpu-secondary-vendor-ids=0x1002 --gpu-secondary-device-ids=0x6660 --service-request-channel-token=2CC88D736CD5B967FFABF3D80913A8BE --mojo-platform-channel-handle=1564 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1540,323888595786725746,10658634873860882194,131072 --service-pipe-token=85352F536FD8EF49CDB14E021AA41E54 --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=85352F536FD8EF49CDB14E021AA41E54 --renderer-client-id=6 --mojo-platform-channel-handle=2608 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1540,323888595786725746,10658634873860882194,131072 --service-pipe-token=E4942A3C87C08317AED7F3725B7C6CD2 --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=E4942A3C87C08317AED7F3725B7C6CD2 --renderer-client-id=8 --mojo-platform-channel-handle=5596 /prefetch:1
C:\WINDOWS\system32\svchost.exe -k netsvcs -s gpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1540,323888595786725746,10658634873860882194,131072 --service-pipe-token=9BD664E252B527FB0CE38AE8ECEA606D --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=9BD664E252B527FB0CE38AE8ECEA606D --renderer-client-id=12 --mojo-platform-channel-handle=5972 /prefetch:1
c:\windows\system32\svchost.exe -k netsvcs -s wlidsvc
C:\WINDOWS\system32\AUDIODG.EXE 0x424
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s WdiSystemHost
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1540,323888595786725746,10658634873860882194,131072 --service-pipe-token=4701ECFE737AA99370D82D85230A68BF --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=4701ECFE737AA99370D82D85230A68BF --renderer-client-id=14 --mojo-platform-channel-handle=6452 /prefetch:1
"C:\Users\Sle\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

====== Scheduled tasks folder ======

C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\AMD Updater - "C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe" /AUTOUPDATEIN
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\CLMLSvc_P2G8 - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\KMSAutoNet - "C:\ProgramData\KMSAutoS\KMSAuto Net.exe" /off=act
C:\WINDOWS\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\WwanSvc\NotificationTask - %SystemRoot%\System32\WiFiTask.exe wwan
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install - %systemroot%\system32\usoclient.exe ScanInstallWait
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe Reboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - %systemroot%\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UNP\RunCampaignManager - %windir%\System32\UNP\UNPCampaignManager.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe -e
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Cellular - %windir%\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5 /source LogonIdleTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_TVSUUpdateTask_Once - %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
C:\WINDOWS\system32\tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_TVSUUpdateTask_Weekly - %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
C:\WINDOWS\system32\tasks\Canon\OIPPESP\Canon OIP Product Extended Survey Program - C:\Program Files\Canon\OIPPESP\Cnpspcnt.exe /Config:"C:\Program Files\Canon\OIPPESP\CnpspCfg.xml"

=========Google Chrome=========

C:\Users\Sle\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Web Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Google Docs 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Google Drive 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension dhigneefebkcagnpnpbibganpmfgebnk 0 BitComet Download Extension for Chrome 1.38.2
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Docs Offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.4
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Chrome Web Store Payments 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6117.717.0.4
Homepage:
default_search_provider.search_url:
C:\Users\Sle\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhigneefebkcagnpnpbibganpmfgebnk]
"Path"=

======Registry dump ======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={E66EBBB8-1502-4363-A5FE-BD32E006D24B}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E66EBBB8-1502-4363-A5FE-BD32E006D24B}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=LCTE

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={E66EBBB8-1502-4363-A5FE-BD32E006D24B}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{E66EBBB8-1502-4363-A5FE-BD32E006D24B}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=LCTE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"DAX2_APP"=C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [2016-06-24 829632]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2016-03-08 1830232]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2015-12-08 602968]
"MFNetworkScannerSelector"=C:\Program Files\Canon\Canon MF Network Scanner Selector\CMFNSS6.EXE [2015-01-22 425512]
"StartCN"=C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [2016-12-16 8029064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2017-07-03 4836032]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Canon Toner Status"=C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe [2015-02-24 1821192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath" = %SystemRoot%\inf\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-09-28 19:39:14 ----D---- C:\rsit
2017-09-28 19:39:14 ----D---- C:\Program Files\trend micro
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-09-14 18:57:13 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-09-14 18:57:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-09-14 18:57:12 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-09-14 18:57:12 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-09-14 18:57:12 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-09-14 18:57:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-09-14 18:57:11 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-09-14 18:57:11 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-09-14 18:57:10 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-09-14 18:57:10 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-09-14 18:57:10 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-09-14 18:57:09 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-09-14 18:57:08 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-09-14 18:57:08 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-09-14 18:57:07 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-09-14 18:57:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-09-14 18:57:07 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2017-09-14 18:57:07 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-09-14 18:57:06 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-09-14 18:57:06 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-09-14 18:57:06 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-09-14 18:57:06 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-09-14 18:57:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-09-14 18:57:05 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-09-14 18:57:05 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-09-14 18:57:04 ----A---- C:\WINDOWS\SYSWOW64\RstrtMgr.dll
2017-09-14 18:57:04 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-09-14 18:57:04 ----A---- C:\WINDOWS\SYSWOW64\CredentialUIBroker.exe
2017-09-14 18:57:04 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-09-14 18:57:03 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-09-14 18:57:03 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-09-14 18:57:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-09-14 18:57:02 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-09-14 18:57:01 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-09-14 18:57:01 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-09-14 18:57:01 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-09-14 18:56:58 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-09-14 18:56:58 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-09-14 18:56:58 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll
2017-09-14 18:56:56 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-09-14 18:56:56 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-09-14 18:56:56 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-09-14 18:56:55 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2017-09-14 18:56:54 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2017-09-14 18:56:54 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-09-14 18:56:54 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-09-14 18:56:54 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2017-09-14 18:56:53 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2017-09-14 18:56:53 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-09-14 18:56:53 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2017-09-14 18:56:53 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2017-09-14 18:56:53 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-09-14 18:56:52 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-09-14 18:56:52 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2017-09-14 18:56:52 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-09-14 18:56:51 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2017-09-14 18:56:51 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-09-14 18:56:51 ----A---- C:\WINDOWS\SYSWOW64\dinput8.dll
2017-09-14 18:56:51 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-09-14 18:56:51 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2017-09-14 18:56:50 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2017-09-14 18:56:50 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2017-09-14 18:56:50 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-09-14 18:56:50 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2017-09-14 18:56:50 ----A---- C:\WINDOWS\system32\BthHFSrv.dll
2017-09-14 18:56:49 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2017-09-14 18:56:49 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2017-09-14 18:56:49 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2017-09-14 18:56:49 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2017-09-14 18:56:49 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2017-09-14 18:56:48 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2017-09-14 18:56:48 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2017-09-14 18:56:48 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2017-09-14 18:56:47 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2017-09-14 18:56:47 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2017-09-14 18:56:47 ----A---- C:\WINDOWS\SYSWOW64\rasman.dll
2017-09-14 18:56:46 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2017-09-14 18:56:42 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2017-09-14 18:56:42 ----A---- C:\WINDOWS\SYSWOW64\dinput.dll
2017-09-14 18:56:41 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2017-09-14 18:56:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2017-09-14 18:56:40 ----A---- C:\WINDOWS\SYSWOW64\shdocvw.dll
2017-09-14 18:56:40 ----A---- C:\WINDOWS\SYSWOW64\ntprint.exe
2017-09-14 18:56:40 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2017-09-14 18:56:30 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-09-14 18:56:30 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-09-14 18:56:29 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-09-14 18:56:29 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-09-14 18:56:28 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-09-14 18:56:24 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-09-14 18:56:22 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2017-09-14 18:56:21 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2017-09-14 18:56:19 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-09-14 18:56:19 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-09-14 18:56:19 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-09-14 18:56:17 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2017-09-14 18:56:16 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2017-09-14 18:56:16 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2017-09-14 18:56:15 ----A---- C:\WINDOWS\system32\ngcrecovery.dll
2017-09-14 18:56:15 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2017-09-14 18:56:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-09-14 18:56:12 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-09-14 18:56:12 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-09-14 18:56:12 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-09-14 18:56:11 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-09-14 18:56:11 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-09-14 18:56:11 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-09-14 18:56:10 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-09-14 18:56:10 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-09-14 18:56:09 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-09-14 18:56:08 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-09-14 18:56:06 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-09-14 18:56:06 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2017-09-14 18:56:05 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2017-09-14 18:56:05 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-09-14 18:56:04 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-09-14 18:56:04 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-09-14 18:56:04 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-09-14 18:56:03 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-09-14 18:56:03 ----A---- C:\WINDOWS\system32\localspl.dll
2017-09-14 18:56:02 ----A---- C:\WINDOWS\system32\offreg.dll
2017-09-14 18:56:02 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-09-14 18:56:02 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-09-14 18:56:00 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-09-14 18:55:56 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2017-09-14 18:55:55 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-09-14 18:55:55 ----A---- C:\WINDOWS\system32\mfps.dll
2017-09-14 18:55:54 ----A---- C:\WINDOWS\system32\nettrace.dll
2017-09-14 18:55:54 ----A---- C:\WINDOWS\system32\mfds.dll
2017-09-14 18:55:53 ----A---- C:\WINDOWS\system32\rasgcw.dll
2017-09-14 18:55:53 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2017-09-14 18:55:53 ----A---- C:\WINDOWS\system32\msvproc.dll
2017-09-14 18:55:53 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2017-09-14 18:55:51 ----A---- C:\WINDOWS\system32\rasplap.dll
2017-09-14 18:55:51 ----A---- C:\WINDOWS\system32\rasdlg.dll
2017-09-14 18:55:51 ----A---- C:\WINDOWS\system32\ntprint.dll
2017-09-14 18:55:51 ----A---- C:\WINDOWS\system32\drivers\nsiproxy.sys
2017-09-14 18:55:51 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-09-14 18:55:49 ----A---- C:\WINDOWS\system32\SEMgrPS.dll
2017-09-14 18:55:48 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2017-09-14 18:55:48 ----A---- C:\WINDOWS\system32\spoolsv.exe
2017-09-14 18:55:48 ----A---- C:\WINDOWS\system32\ntprint.exe
2017-09-14 18:55:48 ----A---- C:\WINDOWS\system32\inetpp.dll
2017-09-14 18:55:46 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-09-14 18:55:46 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-09-14 18:55:46 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-09-14 18:55:46 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-09-14 18:55:46 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-09-14 18:55:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-09-14 18:55:45 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-09-14 18:55:44 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-09-14 18:55:44 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-09-14 18:55:44 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-09-14 18:55:43 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-09-14 18:55:42 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-09-14 18:55:41 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\wer.dll
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\wc_storage.dll
2017-09-14 18:55:41 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-09-14 18:55:40 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-09-14 18:55:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-09-14 18:55:39 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-09-14 18:55:39 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-09-14 18:55:38 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-09-14 18:55:36 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-09-14 18:55:35 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-09-14 18:55:35 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-09-14 18:55:34 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2017-09-14 18:55:33 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2017-09-14 18:55:33 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-09-14 18:55:33 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2017-09-14 18:55:33 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-09-14 18:55:32 ----A---- C:\WINDOWS\system32\datamarketsvc.dll
2017-09-14 18:55:31 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2017-09-14 18:55:31 ----A---- C:\WINDOWS\system32\OpcServices.dll
2017-09-14 18:55:31 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-09-14 18:55:30 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-09-14 18:55:30 ----A---- C:\WINDOWS\system32\NotificationController.dll
2017-09-14 18:55:29 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-09-14 18:55:29 ----A---- C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-09-14 18:55:29 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-09-14 18:55:28 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-14 18:55:27 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-09-14 18:55:27 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-09-14 18:55:27 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-09-14 18:55:27 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-09-14 18:55:26 ----A---- C:\WINDOWS\system32\StartTileData.dll
2017-09-14 18:55:26 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-09-14 18:55:25 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2017-09-14 18:55:25 ----A---- C:\WINDOWS\system32\msIso.dll
2017-09-14 18:55:25 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-09-14 18:55:24 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-09-14 18:55:24 ----A---- C:\WINDOWS\system32\RstrtMgr.dll
2017-09-14 18:55:23 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-09-14 18:55:23 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-09-14 18:55:23 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-09-14 18:55:22 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-09-14 18:55:22 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-09-14 18:55:21 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\winsrvext.dll
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\rpcss.dll
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-09-14 18:55:20 ----A---- C:\WINDOWS\system32\cldapi.dll
2017-09-14 18:55:19 ----A---- C:\WINDOWS\system32\werui.dll
2017-09-14 18:55:19 ----A---- C:\WINDOWS\system32\twinui.dll
2017-09-14 18:55:19 ----A---- C:\WINDOWS\explorer.exe
2017-09-14 18:55:18 ----A---- C:\WINDOWS\system32\wininet.dll
2017-09-14 18:55:18 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-09-14 18:55:18 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-09-14 18:55:17 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-09-14 18:55:17 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-09-14 18:55:17 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-09-14 18:55:17 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2017-09-14 18:55:16 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-09-14 18:55:16 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-09-14 18:55:16 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-09-14 18:55:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-09-14 18:55:15 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-09-14 18:55:15 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-09-14 18:55:15 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-09-14 18:55:15 ----A---- C:\WINDOWS\system32\combase.dll
2017-09-14 18:55:14 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-09-14 18:55:14 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-09-14 18:55:14 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2017-09-14 18:55:13 ----A---- C:\WINDOWS\system32\vss_ps.dll
2017-09-14 18:55:13 ----A---- C:\WINDOWS\system32\shell32.dll
2017-09-14 18:55:12 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-09-14 18:55:08 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-09-14 18:55:07 ----A---- C:\WINDOWS\system32\wpx.dll
2017-09-14 18:55:07 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-09-14 18:55:07 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-09-14 18:55:06 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-09-14 18:55:06 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-09-14 18:55:05 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-09-14 18:55:03 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-09-14 18:55:03 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-09-14 18:55:03 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-09-14 18:55:02 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2017-09-14 18:55:02 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-09-14 18:55:01 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-09-14 18:55:01 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-09-14 18:55:00 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-09-14 18:54:59 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-09-14 18:54:59 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2017-09-14 18:54:59 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-09-14 18:54:58 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-09-14 18:54:58 ----A---- C:\WINDOWS\system32\wevtapi.dll
2017-09-14 18:54:58 ----A---- C:\WINDOWS\system32\SHCore.dll
2017-09-14 18:54:58 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-09-14 18:54:57 ----A---- C:\WINDOWS\system32\user32.dll
2017-09-14 18:54:57 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2017-09-14 18:54:57 ----A---- C:\WINDOWS\system32\propsys.dll
2017-09-14 18:54:57 ----A---- C:\WINDOWS\system32\httpprxm.dll
2017-09-14 18:54:56 ----A---- C:\WINDOWS\system32\wisp.dll
2017-09-14 18:54:56 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2017-09-14 18:54:56 ----A---- C:\WINDOWS\system32\tdh.dll
2017-09-14 18:54:56 ----A---- C:\WINDOWS\system32\PhoneService.dll
2017-09-14 18:54:56 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-09-14 18:54:55 ----A---- C:\WINDOWS\system32\profsvc.dll
2017-09-14 18:54:55 ----A---- C:\WINDOWS\system32\dsreg.dll
2017-09-14 18:54:55 ----A---- C:\WINDOWS\system32\dinput8.dll
2017-09-14 18:54:55 ----A---- C:\WINDOWS\system32\csplte.dll
2017-09-14 18:54:54 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2017-09-14 18:54:54 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2017-09-14 18:54:54 ----A---- C:\WINDOWS\system32\nltest.exe
2017-09-14 18:54:53 ----A---- C:\WINDOWS\system32\win32u.dll
2017-09-14 18:54:53 ----A---- C:\WINDOWS\system32\tbs.dll
2017-09-14 18:54:53 ----A---- C:\WINDOWS\system32\setupapi.dll
2017-09-14 18:54:52 ----A---- C:\WINDOWS\system32\EnterpriseAPNCsp.dll
2017-09-14 18:54:52 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-09-14 18:54:52 ----A---- C:\WINDOWS\system32\CfgSPCellular.dll
2017-09-14 18:54:52 ----A---- C:\WINDOWS\system32\appidapi.dll
2017-09-14 18:54:51 ----A---- C:\WINDOWS\system32\win32k.sys
2017-09-14 18:54:51 ----A---- C:\WINDOWS\system32\srpapi.dll
2017-09-14 18:54:51 ----A---- C:\WINDOWS\system32\rasman.dll
2017-09-14 18:54:51 ----A---- C:\WINDOWS\system32\dinput.dll
2017-09-14 18:54:51 ----A---- C:\WINDOWS\system32\dab.dll
2017-09-14 18:54:50 ----A---- C:\WINDOWS\system32\wups.dll
2017-09-14 18:54:50 ----A---- C:\WINDOWS\system32\shdocvw.dll
2017-09-14 18:54:50 ----A---- C:\WINDOWS\system32\authz.dll
2017-09-14 18:54:50 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-09-07 21:07:19 ----A---- C:\WINDOWS\SYSWOW64\IpNatHlpClient.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\cmintegrator.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-09-07 21:07:18 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2017-09-07 21:07:03 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\shsvcs.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\shlwapi.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2017-09-07 21:07:02 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\shsvcs.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\shlwapi.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\rastls.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\officecsp.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\ofdeploy.exe
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\lpasvc.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\IpNatHlpClient.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\fdeploy.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\efscore.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dwmredir.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dui70.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dmcsps.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\coredpus.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\configmanager2.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-09-07 21:07:02 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\msacm32.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\wininit.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\untfs.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\tquery.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\tokenbinding.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\sscore.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\srvsvc.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\spbcd.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\services.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\scksp.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\rastlsext.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\qasf.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\psmsrv.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\profsvcext.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\ole32.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\msacm32.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\InputService.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\hal.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\bcdboot.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\bcd.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\autochk.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\autofmt.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\autoconv.exe
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-09-07 21:06:55 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\tokenbinding.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msxbde40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\mswdat10.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\mstext40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msrepl40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\mspbde40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msltus40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msjtes40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msjter40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msjetoledb40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2017-09-07 21:06:54 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2017-09-07 20:57:24 ----A---- C:\WINDOWS\system32\prm0005.dll
2017-09-07 20:56:29 ----A---- C:\WINDOWS\system32\perfi005.dat
2017-09-07 20:56:29 ----A---- C:\WINDOWS\system32\perfh005.dat
2017-09-07 20:56:29 ----A---- C:\WINDOWS\system32\perfd005.dat
2017-09-07 20:56:29 ----A---- C:\WINDOWS\system32\perfc005.dat
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\drivers\cs-CZ
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\cs
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-09-07 20:56:21 ----D---- C:\WINDOWS\system32\cs
2017-09-07 20:56:21 ----D---- C:\WINDOWS\cs-CZ
2017-09-07 20:51:31 ----D---- C:\WINDOWS\system32\Microsoft
2017-09-07 20:51:31 ----D---- C:\WINDOWS\ServiceProfiles
2017-09-07 20:49:50 ----D---- C:\Program Files\Reference Assemblies
2017-09-07 20:49:50 ----D---- C:\Program Files\MSBuild
2017-09-07 20:49:50 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-09-07 20:49:50 ----D---- C:\Program Files (x86)\MSBuild
2017-09-07 20:49:02 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2017-09-07 20:49:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2017-09-07 20:49:02 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-09-07 20:48:57 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-09-07 20:48:57 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-09-07 20:48:57 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-09-07 17:42:00 ----D---- C:\Users\Sle\AppData\Roaming\Skype
2017-09-07 17:39:30 ----D---- C:\WINDOWS\system32\ÿÿ×
2017-09-07 12:59:47 ----D---- C:\ProgramData\Microsoft OneDrive
2017-09-07 11:40:16 ----D---- C:\WINDOWS\system32\ÿÿo
2017-09-07 11:40:16 ----D---- C:\WINDOWS\system32\9b0fcea047c386da..bin
2017-09-07 11:40:16 ----D---- C:\WINDOWS\system32\
2017-09-07 11:39:48 ----SHD---- C:\ProgramData\Templates
2017-09-07 11:39:48 ----SHD---- C:\ProgramData\Start Menu
2017-09-07 11:39:48 ----SHD---- C:\ProgramData\Documents
2017-09-07 11:39:48 ----SHD---- C:\ProgramData\Desktop
2017-09-07 11:39:48 ----SHD---- C:\ProgramData\Application Data
2017-09-07 11:37:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-07 11:33:41 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2017-09-07 11:29:30 ----ASH---- C:\hiberfil.sys
2017-09-07 11:25:53 ----D---- C:\ProgramData\USOShared
2017-09-07 11:22:34 ----SD---- C:\Users\Sle\AppData\Roaming\Microsoft
2017-09-07 11:21:47 ----AD---- C:\Program Files (x86)\AMD
2017-09-07 11:21:33 ----D---- C:\WINDOWS\SYSWOW64\sda
2017-09-07 11:20:47 ----D---- C:\ProgramData\Package Cache
2017-09-07 11:20:22 ----AD---- C:\Program Files\AMD
2017-09-07 11:20:21 ----D---- C:\Program Files\Common Files\ATI Technologies
2017-09-07 11:19:58 ----D---- C:\Program Files\Elantech
2017-09-07 11:19:47 ----D---- C:\Program Files\Canon
2017-09-07 11:19:45 ----D---- C:\ProgramData\Realtek
2017-09-07 11:19:39 ----D---- C:\WINDOWS\UCI
2017-09-07 11:19:11 ----HD---- C:\Program Files\Uninstall Information
2017-09-07 11:19:10 ----D---- C:\ProgramData\UIU
2017-09-07 11:19:10 ----A---- C:\WINDOWS\SYSWOW64\RebootPrompt.exe
2017-09-07 11:19:07 ----D---- C:\Program Files\CONEXANT
2017-09-07 11:18:29 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2017-09-07 11:16:27 ----AS---- C:\WINDOWS\bootstat.dat
2017-09-07 11:15:12 ----D---- C:\WINDOWS\Prefetch
2017-09-07 11:15:00 ----D---- C:\WINDOWS\system32\SleepStudy
2017-09-07 11:14:55 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-29 22:04:00 ----D---- C:\Program Files (x86)\Canon

====== List of files/folders modified in the last 1 month ======

2017-09-28 19:39:14 ----RD---- C:\Program Files
2017-09-28 19:27:43 ----D---- C:\WINDOWS\System32
2017-09-28 19:24:49 ----D---- C:\WINDOWS\Temp
2017-09-28 19:23:49 ----D---- C:\WINDOWS\system32\drivers
2017-09-28 19:22:36 ----D---- C:\WINDOWS\system32\sru
2017-09-28 19:05:39 ----D---- C:\WINDOWS\system32\catroot2
2017-09-28 17:46:38 ----RD---- C:\WINDOWS\Microsoft.NET
2017-09-28 17:38:07 ----D---- C:\WINDOWS\AppReadiness
2017-09-25 11:00:13 ----D---- C:\AMD
2017-09-22 14:31:56 ----SHD---- C:\System Volume Information
2017-09-22 14:24:24 ----D---- C:\WINDOWS\system32\config
2017-09-22 14:10:36 ----HD---- C:\Program Files\WindowsApps
2017-09-20 12:40:16 ----D---- C:\WINDOWS\INF
2017-09-19 19:10:35 ----D---- C:\ProgramData\KMSAutoS
2017-09-19 19:07:35 ----D---- C:\Windows
2017-09-18 13:36:04 ----D---- C:\WINDOWS\system32\NDF
2017-09-15 14:13:15 ----RD---- C:\WINDOWS\assembly
2017-09-15 14:12:41 ----D---- C:\WINDOWS\system32\DriverStore
2017-09-15 14:12:40 ----D---- C:\WINDOWS\WinSxS
2017-09-15 13:53:46 ----D---- C:\WINDOWS\rescache
2017-09-15 13:34:46 ----D---- C:\WINDOWS\system32\WDI
2017-09-14 23:12:37 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-09-14 23:12:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2017-09-14 23:12:37 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-09-14 23:12:37 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-09-14 23:12:37 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-09-14 23:12:37 ----D---- C:\WINDOWS\SysWOW64
2017-09-14 23:12:32 ----SD---- C:\WINDOWS\system32\F12
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\wbem
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\setup
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\en-US
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\en
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-09-14 23:12:32 ----D---- C:\WINDOWS\system32\cs-CZ
2017-09-14 23:12:31 ----D---- C:\WINDOWS\ShellExperiences
2017-09-14 23:12:30 ----D---- C:\Program Files\Windows Photo Viewer
2017-09-14 23:12:30 ----D---- C:\Program Files\Windows Mail
2017-09-14 23:12:30 ----D---- C:\Program Files\Internet Explorer
2017-09-14 23:12:30 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-09-14 23:12:30 ----D---- C:\Program Files (x86)\Windows Mail
2017-09-14 23:12:30 ----D---- C:\Program Files (x86)\Internet Explorer
2017-09-14 19:16:04 ----D---- C:\WINDOWS\system32\MRT
2017-09-14 19:06:58 ----D---- C:\WINDOWS\debug
2017-09-14 19:06:53 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-09-12 09:44:12 ----D---- C:\Users\Sle\AppData\Roaming\Identities
2017-09-12 09:39:34 ----D---- C:\Users\Sle\AppData\Roaming\DAEMON Tools Lite
2017-09-12 09:39:05 ----DC---- C:\WINDOWS\Panther
2017-09-12 09:36:32 ----D---- C:\WINDOWS\system32\Tasks
2017-09-12 09:28:08 ----D---- C:\WINDOWS\LiveKernelReports
2017-09-11 10:31:55 ----D---- C:\WINDOWS\appcompat
2017-09-11 09:30:47 ----D---- C:\WINDOWS\Logs
2017-09-11 08:27:53 ----D---- C:\WINDOWS\system32\LogFiles
2017-09-08 15:49:34 ----D---- C:\WINDOWS\CbsTemp
2017-09-07 21:09:45 ----D---- C:\WINDOWS\Setup
2017-09-07 21:08:48 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2017-09-07 21:08:48 ----D---- C:\WINDOWS\system32\WinMetadata
2017-09-07 21:08:48 ----D---- C:\WINDOWS\AppPatch
2017-09-07 20:57:51 ----D---- C:\WINDOWS\OCR
2017-09-07 20:56:23 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\winrm
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\WCN
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\oobe
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\MUI
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\Dism
2017-09-07 20:56:23 ----D---- C:\WINDOWS\SYSWOW64\Com
2017-09-07 20:56:23 ----D---- C:\WINDOWS\system32\winrm
2017-09-07 20:56:22 ----SD---- C:\WINDOWS\system32\DiagSvcs
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\WCN
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\slmgr
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\MUI
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\migwiz
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\migration
2017-09-07 20:56:22 ----D---- C:\WINDOWS\system32\Dism
2017-09-07 20:56:21 ----RD---- C:\Program Files\Windows Defender
2017-09-07 20:56:21 ----D---- C:\WINDOWS\system32\Com
2017-09-07 20:56:21 ----D---- C:\WINDOWS\system32\Boot
2017-09-07 20:56:21 ----D---- C:\WINDOWS\servicing
2017-09-07 20:56:21 ----D---- C:\WINDOWS\PolicyDefinitions
2017-09-07 20:56:21 ----D---- C:\WINDOWS\IME
2017-09-07 20:56:21 ----D---- C:\WINDOWS\Help
2017-09-07 20:56:21 ----D---- C:\Program Files\Windows Media Player
2017-09-07 20:56:21 ----D---- C:\Program Files\Common Files\System
2017-09-07 20:56:21 ----D---- C:\Program Files (x86)\Windows Media Player
2017-09-07 20:56:21 ----D---- C:\Program Files (x86)\Windows Defender
2017-09-07 17:40:19 ----SHDC---- C:\WINDOWS\Installer
2017-09-07 17:40:15 ----SHD---- C:\Config.Msi
2017-09-07 12:59:47 ----HD---- C:\ProgramData
2017-09-07 12:58:44 ----D---- C:\WINDOWS\system32\restore
2017-09-07 12:57:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-09-07 11:39:02 ----D---- C:\WINDOWS\system32\WinBioDatabase
2017-09-07 11:38:45 ----D---- C:\WINDOWS\SoftwareDistribution
2017-09-07 11:37:44 ----D---- C:\WINDOWS\Registration
2017-09-07 11:37:28 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2017-09-07 11:34:10 ----D---- C:\WINDOWS\HoloShell
2017-09-07 11:33:22 ----D---- C:\WINDOWS\Tasks
2017-09-07 11:33:12 ----SD---- C:\ProgramData\Microsoft
2017-09-07 11:32:48 ----RSD---- C:\WINDOWS\Fonts
2017-09-07 11:32:37 ----D---- C:\WINDOWS\system32\drivers\etc
2017-09-07 11:28:56 ----D---- C:\WINDOWS\SYSWOW64\drivers
2017-09-07 11:28:56 ----D---- C:\WINDOWS\system32\UNP
2017-09-07 11:28:54 ----D---- C:\WINDOWS\SHELLNEW
2017-09-07 11:25:54 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-09-07 11:25:53 ----D---- C:\ProgramData\USOPrivate
2017-09-07 11:25:46 ----D---- C:\WINDOWS\twain_32
2017-09-07 11:25:43 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2017-09-07 11:25:41 ----D---- C:\WINDOWS\system32\ÿÿÿÿÿÿÿÿ8
2017-09-07 11:25:40 ----D---- C:\WINDOWS\system32\zh-HK
2017-09-07 11:25:39 ----D---- C:\WINDOWS\system32\spool
2017-09-07 11:25:36 ----D---- C:\WINDOWS\system32\oobe
2017-09-07 11:25:35 ----D---- C:\WINDOWS\system32\m32
2017-09-07 11:25:06 ----D---- C:\WINDOWS\system32\CodeIntegrity
2017-09-07 11:25:04 ----HD---- C:\WINDOWS\system32\CanonMF Uninstaller Information
2017-09-07 11:25:04 ----D---- C:\WINDOWS\system32\c8319dcc4479d95a050e1d1af206ad34e9412fdc75bef..bin
2017-09-07 11:25:04 ----D---- C:\WINDOWS\system32\af206ad34e9412fdc75bef..bin
2017-09-07 11:25:04 ----D---- C:\WINDOWS\system32\6fc53ed430171527170e072d379ce9bd46c24d2776c84..bin
2017-09-07 11:24:45 ----RD---- C:\Program Files (x86)
2017-09-07 11:24:45 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-09-07 11:24:42 ----D---- C:\Program Files (x86)\Common Files
2017-09-07 11:24:37 ----AD---- C:\Program Files\Common Files\microsoft shared
2017-09-07 11:24:10 ----D---- C:\WINDOWS\system32\Recovery
2017-09-07 11:22:35 ----RD---- C:\Users
2017-09-07 11:21:42 ----HD---- C:\Recovery
2017-09-07 11:21:38 ----D---- C:\WINDOWS\system32\Sysprep
2017-09-07 11:20:21 ----D---- C:\Program Files\Common Files
2017-09-07 11:19:48 ----RSD---- C:\WINDOWS\Media
2017-09-02 17:15:22 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 amdkmpfd;@oem12.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2016-12-23 87840]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568]
R1 amdpsp;@oem22.inf,%amdpsp.SVCDESC%;AMD PSP Service; C:\WINDOWS\system32\DRIVERS\amdpsp.sys [2017-06-12 239976]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336]
R3 ACPIVPC;@oem10.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2016-10-19 45048]
R3 amdkmdag;amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0309839.inf_amd64_168acb088d48fafb\atikmdag.sys [2016-12-23 26587656]
R3 amdkmdap;amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0309839.inf_amd64_168acb088d48fafb\atikmpag.sys [2016-12-23 527256]
R3 AtiHDAudioService;@oem18.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2016-09-28 110104]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2017-09-07 105472]
R3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2017-09-07 97280]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2017-09-05 130560]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2017-03-18 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664]
R3 CnxtHdAudService;@oem6.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2016-07-27 1558008]
R3 dtlitescsibus;@oem2.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2017-08-08 30264]
R3 dtliteusbbus;@oem0.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2017-08-08 47672]
R3 ETD;@oem21.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2017-04-12 607312]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2017-09-07 180736]
R3 rt640x64;@oem17.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-08-22 943112]
R3 RtkBtFilter;@oem5.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2016-08-26 736872]
R3 RTSUER;@oem4.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2016-08-05 418784]
R3 RTWlanE;@oem3.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2017-05-19 6813664]
R3 SNP2UVCW10;@oem25.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvcW10.sys [2016-08-15 1706600]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2017-03-18 13312]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 amdkmcsp;@oem22.inf,%amdkmcsp.SVCDESC%;AMD Kernel Mode CSP Service; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [2017-06-12 95080]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2017-09-07 982016]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 netvsc;netvsc; C:\WINDOWS\System32\drivers\netvsc.sys [2017-07-11 118784]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFS;ReFS; C:\WINDOWS\system32\drivers\ReFS.sys [2017-03-18 1735584]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-19 40352]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2017-03-18 179200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2016-12-23 295832]
R2 CDPUserSvc_3f93e;Connected Devices Platform User Service_3f93e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 CxUtilSvc;CxUtilSvc; C:\Program Files\Conexant\SAII\CxUtilSvc.exe [2016-05-12 132096]
R2 DAX2API;Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [2016-07-18 154816]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\dusmsvc.dll
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2017-04-12 134872]
R2 GDCAgent;GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [2016-03-23 1210352]
R2 OneSyncSvc_3f93e;Sync Host_3f93e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 RtkBtManServ;@oem5.inf,%BtDevMan.SvcDesc%;Realtek Bluetooth Device Manager Service; C:\WINDOWS\RtkBtManServ.exe [2016-08-26 241408]
R2 SAService;Conexant SmartAudio service; C:\WINDOWS\syswow64\SAsrv.exe []
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-11 336320]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\TokenBroker.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 CxAudMsg;Conexant Audio Message Service; C:\Windows\system32\CxAudMsg64.exe [2015-09-16 225624]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; C:\Program Files\BitComet\tools\BitCometService.exe [2017-07-06 1296728]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\DevicesFlowBroker.dll
S3 DevicesFlowUserSvc_3f93e;DevicesFlow_3f93e; C:\WINDOWS\system32\svchost.exe -k DevicesFlow;"ServiceDll" =
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2017-07-03 2291904]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\IpxlatCfg.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_3f93e;MessagingService_3f93e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\NaturalAuth.dll
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PimIndexMaintenanceSvc_3f93e;Contact Data_3f93e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalService;"ServiceDll" = %SystemRoot%\system32\SEMgrSvc.dll
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 28 zář 2017 18:52

Zdravím!
Píše to o změně nastavení hardwaru. Nerýpal jste se v biosu?

Sleseleseleci · #3 Příspěvek od **Sleseleseleci** » 29 zář 2017 13:10

Nene,

jen když jsem počítač poprvé převzal do správy, tak jsem omylem odinstaloval ovladače, které jsem pak nainstaloval znovu a vše bylo v pořádku, nicméně to od té doby začalo dělat tohle. Restartoval jsem to už nesčetněkrát, a pořád to samé.

V biosu jsem vůbec nebyl.

Kdyby to mělo být biosem, lze tam něco s tím udělat? Se stručným návodem svedu.

Děkuji,
Sle.

#4 Příspěvek od **Rudy** » 29 zář 2017 13:31

No, chtělo by to nastavit "default settings". Ve většině biosů je na toto zvláštní položka, která se potvrdí (de facto reset biosu). Pak restartujte.

Sleseleseleci · #5 Příspěvek od **Sleseleseleci** » 29 zář 2017 14:50

Zdravím,

v biosu jsem tedy obnovil default settings, ale problém přetrvává a je stále stejný.

Sle

#6 Příspěvek od **Rudy** » 29 zář 2017 16:44

Zkuste obnovu systému k datu, kdy korketně fungoval.

Sleseleseleci · #7 Příspěvek od **Sleseleseleci** » 01 říj 2017 14:21

Obnovu systému jsem v životě nedělal. Ztratí se při tom nějaké data? Je třeba zálohovat?

Děkuji,
Sle

#8 Příspěvek od **Rudy** » 01 říj 2017 15:48

Záloha je dobrá při jakékoli manipulaci se systémem (i tehdy, když nic neděláte). Takový harddisk se může sesypat kdykoli.

Asi takhle. Vaše vlastní data vám zůstanou, pouze se odregistrují všechny instalace provedené mezi dneškem a bodem obnovy. Ty budete muset obnovit.

Sleseleseleci · #9 Příspěvek od **Sleseleseleci** » 02 říj 2017 18:35

Tak poslední bod obnovy je 14.9.2017, a to jsem si jist, že problém s oknem po startu počítače je mnohem mnohem starší.

Problém s internetem, který sem tam vypadával a sem tam nefungoval vůbec nebo pomalu, jsem pravděpodobně vyřešil, protože v počítači jsou RTL 8821ae ovladače na wifi, které jsou aktuální, konkrétně květen 2017, a já je přeinstaloval na starší, byť ovladače pro W7, z roku 2014. Tyhle W10ky to skously a funguje vše bez problému s těmahle ovladačema. Vyskakovací okno skrze systém PCI Bus, že byly změněny hardware settings ale pořád setrvávají.

Co teď prosím? Mohu to maximálně uvést do továrního nastavení z hlediska té obnovy.

Sle

#10 Příspěvek od **Rudy** » 02 říj 2017 18:53

Nic jiného asi nezbude, pokud nemáte starší bod obnovy.

VIRY.CZ

Funkčnost snad všeho - nové PC

Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC

Re: Funkčnost snad všeho - nové PC