Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Problém s NTB - programy padají

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Problém s NTB - programy padají

#1 Příspěvek od breta21 »

Zdravím, poslední dobou se vyskytl problém s NTB, kdy některé programy se neustalé minimalizují... Vydrží třeba 10 sec na full screen a pak se zminimalizují. Toto se opakuje 10krát a poté se ustáli. Někdy toto ale trvá i 10 minut. Malwarbytes je čistý, avast taky...
Předem díky za rady a tipy :) Z NTB jsem se snažil odinstalovat všechno nepotřebné
Logfile of random's system information tool 1.10 (written by random/random)
Run by breta at 2018-06-12 21:17:03
Microsoft Windows 10 Home
System drive C: has 133 GB (55%) free of 243 GB
Total RAM: 3970 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:17:05, on 12.06.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files\trend micro\breta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer17win10.msn.com/?pc=ACTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer17win10.msn.com/?pc=ACTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [OneDrive] "C:\Users\breta\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Lync] C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe /fromrunkey
O4 - HKCU\..\Run: [Viber] "C:\Users\breta\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1885444895-1151541194-3766610177-1000\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'defaultuser0')
O4 - HKUS\S-1-5-21-1885444895-1151541194-3766610177-1000\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'defaultuser0')
O4 - Startup: Sync.LNK = C:\Users\breta\AppData\Local\Programs\Sync\sync-taskbar.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\DRIVERS\AdminService.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel SST Parameter Service (IntelSSTSvc) - Unknown owner - C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe (file missing)
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: OpenVPNService - - C:\Program Files\OpenVPN\bin\openvpnserv2.exe
O23 - Service: OpenVPN Interactive Service (OpenVPNServiceInteractive) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: OpenVPN Legacy Service (OpenVPNServiceLegacy) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Quick Access Local Service (QALSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
O23 - Service: Quick Access Service (QASvc) - Acer Incorporated - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - Unknown owner - C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 13369 bytes

======Listing Processes======








winlogon.exe


c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s gpsvc
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k appmodel -p -s camsvc

c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe"
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"

"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s WwanSvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\AUDIODG.EXE 0x264
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p


c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\DRIVERS\AdminService.exe
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe"
"c:\program files\openvpn\bin\openvpnserv.exe"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc

"C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\SysWOW64\svchost.exe -k MbnExt
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe" -ServerName:App.AppX495fygk72hjw82j58ny5h3nr8hpsd8vs.mca
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1885444895-1151541194-3766610177-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1885444895-1151541194-3766610177-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NgcSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /TRUEHARMONY
"C:\Program Files\Acer\Acer Quick Access\QALSvc.exe"
AvastUI.exe /nogui
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --flag-switches-begin --flag-switches-end --restore-last-session
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\breta\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\breta\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\breta\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=67.0.3396.79 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffc72023228,0x7ffc72023238,0x7ffc72023248
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=11128 --on-initialized-event-handle=676 --parent-handle=680 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=DD6FB0227111C3B7B30D7AE5BF694D5B --mojo-platform-channel-handle=1688 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=52419C9092923F43EED4EB6FE556117B --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=52419C9092923F43EED4EB6FE556117B --renderer-client-id=7 --mojo-platform-channel-handle=2288 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=91A97B7D5A1A013785C56C48B624A578 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=91A97B7D5A1A013785C56C48B624A578 --renderer-client-id=3 --mojo-platform-channel-handle=2300 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=01AA7F837DADC0E1C9C8DA3B0103A037 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=01AA7F837DADC0E1C9C8DA3B0103A037 --renderer-client-id=8 --mojo-platform-channel-handle=2828 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=252B8B58DB9F455FB348EB0F512A4780 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=252B8B58DB9F455FB348EB0F512A4780 --renderer-client-id=9 --mojo-platform-channel-handle=2836 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=E718DE200B90C3916DDAADB0D1847D52 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=E718DE200B90C3916DDAADB0D1847D52 --renderer-client-id=10 --mojo-platform-channel-handle=2852 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=0A27CB3AEC5EE2EA3AA4356247E2DB99 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=0A27CB3AEC5EE2EA3AA4356247E2DB99 --renderer-client-id=4 --mojo-platform-channel-handle=3672 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=BCC423DE82496CCBE2C362158A82C627 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=BCC423DE82496CCBE2C362158A82C627 --renderer-client-id=5 --mojo-platform-channel-handle=3972 /prefetch:1
c:\windows\system32\svchost.exe -k bcastdvruserservice -s BcastDVRUserService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=07ADFC9CC2AC757B5AE90C9A5DD053AD --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=07ADFC9CC2AC757B5AE90C9A5DD053AD --renderer-client-id=13 --mojo-platform-channel-handle=2144 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=0CF388FAB30C4E89D9911564215C3F9B --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=0CF388FAB30C4E89D9911564215C3F9B --renderer-client-id=15 --mojo-platform-channel-handle=6632 /prefetch:1
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\Acer\Acer Quick Access\QAAgent.exe"
"C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe"
"C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
c:\windows\system32\svchost.exe -k dcomlaunch -p -s DeviceInstall
C:\OEM\Preload\FubTool\FubTool.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=28B55B25AC4429CFF691B4218C33550D --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=28B55B25AC4429CFF691B4218C33550D --renderer-client-id=18 --mojo-platform-channel-handle=8056 /prefetch:1
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Users\breta\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe" /LOGON
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\breta\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-1885444895-1151541194-3766610177-1001 -c 736 -s 420 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k netsvcs -p -s dmwappushservice
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1672,9431179430721957440,12648971935180709457,131072 --service-pipe-token=5B71B74D240BAA290BE9D3C2715A7E08 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=5B71B74D240BAA290BE9D3C2715A7E08 --renderer-client-id=19 --mojo-platform-channel-handle=1348 /prefetch:1
"C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s SmsRouter
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"


C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Users\breta\Downloads\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\extensions\
abb-acer@amazon.com
partnerdefaults@mozilla.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-05-31 207024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-04-29 149168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2016-09-20 71168]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-08-22 16695816]
"RtHDVBg_TrueHarmony"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-08-22 1462792]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-05-28 242904]
"MouseDriver"=C:\WINDOWS\system32\TiltWheelMouse.exe [2013-04-09 241152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2018-04-12 20488312]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2014-09-19 89600]
""= []
"OneDrive"=C:\Users\breta\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-03 1624224]
"Lync"=C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [2018-05-31 23838384]
"Viber"=C:\Users\breta\AppData\Local\Viber\Viber.exe [2018-06-01 40255560]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-01-09 10257872]

C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sync.LNK - C:\Users\breta\AppData\Local\Programs\Sync\sync-taskbar.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-12 21:14:25 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2018-06-12 21:12:29 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-06-10 19:49:38 ----D---- C:\ProgramData\Gemfor
2018-06-10 18:19:57 ----D---- C:\ProgramData\T-Mobile
2018-06-10 18:19:27 ----D---- C:\Users\breta\AppData\Roaming\T-Mobile
2018-06-10 18:19:27 ----D---- C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604}
2018-06-10 18:19:23 ----D---- C:\Program Files (x86)\T-Mobile
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01007.dll
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewusbwwan.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewusbmdm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewdcsc.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_wwanecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_juwwanecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_juextctrl.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jubusenum.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_hwupgrade.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_cdcacm.sys
2018-06-10 18:18:59 ----D---- C:\Program Files (x86)\Huawei
2018-05-28 15:29:39 ----AS---- C:\WINDOWS\bootstat.dat
2018-05-28 15:28:43 ----D---- C:\WINDOWS\system32\Microsoft
2018-05-28 15:28:43 ----D---- C:\WINDOWS\ServiceProfiles
2018-05-28 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-05-28 15:26:42 ----A---- C:\WINDOWS\system32\wmp.dll
2018-05-28 15:26:38 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\winload.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wininet.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\tzres.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\tquery.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\shell32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\msi.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\itss.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\credssp.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\cdp.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-05-28 15:22:02 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-05-28 15:22:01 ----D---- C:\Program Files\Reference Assemblies
2018-05-28 15:22:01 ----D---- C:\Program Files\MSBuild
2018-05-28 15:22:01 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-05-28 15:22:01 ----D---- C:\Program Files (x86)\MSBuild
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNHMCA6.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVL.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVI.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVC.dll
2018-05-28 15:19:32 ----A---- C:\WINDOWS\system32\CNMLMBV.DLL
2018-05-28 14:41:32 ----D---- C:\WINDOWS\system32\drivers\wd
2018-05-28 14:40:18 ----A---- C:\WINDOWS\system32\aswBoot.exe
2018-05-28 14:39:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-28 14:37:13 ----ASH---- C:\hiberfil.sys
2018-05-28 14:36:20 ----D---- C:\ProgramData\USOShared
2018-05-28 14:35:48 ----SD---- C:\Users\breta\AppData\Roaming\Microsoft
2018-05-28 14:35:06 ----D---- C:\WINDOWS\system32\IntelSSTAPO
2018-05-28 14:34:47 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2018-05-28 14:34:47 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-05-28 14:34:45 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-05-28 14:33:53 ----D---- C:\WINDOWS\Prefetch
2018-05-28 14:33:46 ----D---- C:\WINDOWS\system32\SleepStudy
2018-05-28 14:33:46 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-26 09:09:13 ----D---- C:\SZ
2018-05-22 11:47:16 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-06-12 21:17:04 ----D---- C:\Program Files\trend micro
2018-06-12 21:16:08 ----D---- C:\WINDOWS\Temp
2018-06-12 21:15:11 ----D---- C:\WINDOWS\system32\catroot2
2018-06-12 21:15:10 ----D---- C:\WINDOWS\system32\DriverStore
2018-06-12 21:15:10 ----D---- C:\WINDOWS\INF
2018-06-12 21:14:25 ----D---- C:\WINDOWS\SysWOW64
2018-06-12 21:14:19 ----D---- C:\WINDOWS\system32\drivers
2018-06-12 21:14:18 ----D---- C:\Program Files (x86)\TunnelBear
2018-06-12 21:14:13 ----D---- C:\WINDOWS\AppReadiness
2018-06-12 21:14:12 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-12 21:13:45 ----D---- C:\WINDOWS\system32\sru
2018-06-12 21:09:52 ----SHD---- C:\System Volume Information
2018-06-12 21:03:05 ----D---- C:\WINDOWS\CbsTemp
2018-06-12 21:01:40 ----D---- C:\WINDOWS\Logs
2018-06-12 20:34:40 ----D---- C:\Users\breta\AppData\Roaming\ViberPC
2018-06-12 18:44:58 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-12 18:44:52 ----D---- C:\WINDOWS\system32\config
2018-06-12 18:44:47 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-10 19:50:46 ----RD---- C:\Program Files (x86)
2018-06-10 19:49:38 ----HD---- C:\ProgramData
2018-06-10 18:19:09 ----D---- C:\WINDOWS\System32
2018-06-10 18:15:39 ----D---- C:\WINDOWS\system32\NDF
2018-06-10 12:20:14 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-06-10 08:32:14 ----HD---- C:\Program Files\WindowsApps
2018-06-09 20:02:41 ----D---- C:\WINDOWS\WinSxS
2018-06-07 11:43:00 ----SHD---- C:\WINDOWS\Installer
2018-06-07 11:42:33 ----D---- C:\Program Files (x86)\Common Files
2018-06-07 11:41:06 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-06-05 21:04:19 ----D---- C:\Program Files\Highresolution Enterprises
2018-06-05 21:04:16 ----D---- C:\WINDOWS\system32\Tasks
2018-06-05 11:02:13 ----D---- C:\noveeeeeeeeeee
2018-06-04 18:50:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-02 08:52:08 ----D---- C:\WINDOWS\Tasks
2018-05-30 14:29:28 ----D---- C:\WINDOWS\debug
2018-05-30 06:55:49 ----D---- C:\Program Files (x86)\Acer
2018-05-29 22:13:29 ----RD---- C:\WINDOWS\assembly
2018-05-29 07:21:13 ----D---- C:\WINDOWS\appcompat
2018-05-28 21:27:16 ----D---- C:\WINDOWS\system32\WDI
2018-05-28 16:47:07 ----D---- C:\WINDOWS\system32\restore
2018-05-28 15:33:31 ----RSD---- C:\WINDOWS\Fonts
2018-05-28 15:33:31 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\spool
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\drivers\etc
2018-05-28 15:33:30 ----RD---- C:\Program Files
2018-05-28 15:33:30 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\Recovery
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\oobe
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\ihvmanager
2018-05-28 15:33:30 ----D---- C:\WINDOWS\oem
2018-05-28 15:33:30 ----D---- C:\WINDOWS\LiveKernelReports
2018-05-28 15:33:30 ----D---- C:\Program Files\Intel
2018-05-28 15:33:30 ----D---- C:\Program Files\Common Files\microsoft shared
2018-05-28 15:33:30 ----D---- C:\Program Files\Common Files
2018-05-28 15:33:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-28 15:33:30 ----AD---- C:\Program Files\UNP
2018-05-28 15:33:28 ----D---- C:\WINDOWS\Setup
2018-05-28 15:30:32 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2018-05-28 15:30:10 ----D---- C:\Program Files (x86)\Windows Mail
2018-05-28 15:30:09 ----D---- C:\Program Files\Windows Mail
2018-05-28 15:30:09 ----D---- C:\Program Files\Realtek
2018-05-28 15:27:20 ----D---- C:\WINDOWS\TextInput
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\zu-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\yo-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\xh-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\wo-SN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\vi-VN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ur-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ug-CN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tt-RU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tn-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tk-TM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ti-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\te-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ta-in
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sw-KE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sq-AL
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\si-lk
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\setup
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\rw-RW
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\quz-PE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\prs-AF
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\pa-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\or-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\nso-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\nn-NO
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ne-NP
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mt-MT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ms-MY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mr-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mn-MN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ml-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mk-MK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mi-NZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\lo-LA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\lb-LU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ky-KG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kok-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\km-KH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kk-KZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ka-GE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\is-IS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ig-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\id-ID
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\hy-AM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\gu-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\gd-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ga-IE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\fil-PH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\fa-IR
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\en-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\cy-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\cs-CZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\Boot
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bn-BD
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\be-BY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\as-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\appraiser
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\am-et
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\af-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\Provisioning
2018-05-28 15:27:20 ----D---- C:\WINDOWS\bcastdvr
2018-05-28 15:27:20 ----D---- C:\WINDOWS\apppatch
2018-05-28 15:27:20 ----D---- C:\Program Files\Windows Photo Viewer
2018-05-28 15:27:20 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-05-28 15:24:30 ----SD---- C:\WINDOWS\SYSWOW64\F12
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\winrm
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\WCN
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2018-05-28 15:24:29 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2018-05-28 15:24:29 ----SD---- C:\WINDOWS\system32\F12
2018-05-28 15:24:29 ----D---- C:\WINDOWS\SYSWOW64\en
2018-05-28 15:24:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\winrm
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\WCN
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\slmgr
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\migwiz
2018-05-28 15:24:28 ----SD---- C:\WINDOWS\system32\DiagSvcs
2018-05-28 15:24:28 ----D---- C:\WINDOWS\system32\en
2018-05-28 15:24:28 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-05-28 15:24:28 ----D---- C:\WINDOWS\servicing
2018-05-28 15:24:28 ----D---- C:\WINDOWS\en-US
2018-05-28 15:24:28 ----D---- C:\Program Files\Windows Media Player
2018-05-28 15:24:28 ----D---- C:\Program Files\Windows Defender
2018-05-28 15:24:28 ----D---- C:\Program Files (x86)\Windows Media Player
2018-05-28 15:24:28 ----D---- C:\Program Files (x86)\Windows Defender
2018-05-28 15:22:02 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-05-28 15:22:02 ----D---- C:\WINDOWS\system32\MUI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-05-28 15:21:36 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\zh-TW
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\zh-CN
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\uk-UA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\tr-TR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\th-TH
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sv-SE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sl-SI
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sk-SK
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ru-RU
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ro-RO
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pt-PT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pt-BR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pl-PL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\nl-NL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\nb-NO
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\lv-LV
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\lt-LT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ko-KR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ja-jp
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\it-IT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\hu-HU
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\hr-HR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\he-IL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fr-FR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fr-CA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fi-FI
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\et-EE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\es-MX
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\es-ES
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\en-GB
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\el-GR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\de-DE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\da-DK
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\bg-BG
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ar-SA
2018-05-28 14:48:11 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-05-28 14:41:43 ----D---- C:\WINDOWS\SoftwareDistribution
2018-05-28 14:41:36 ----D---- C:\Program Files\windows nt
2018-05-28 14:41:11 ----D---- C:\Windows
2018-05-28 14:41:06 ----D---- C:\WINDOWS\Registration
2018-05-28 14:39:33 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-05-28 14:39:25 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-05-28 14:39:01 ----D---- C:\WINDOWS\system32\wbem
2018-05-28 14:38:58 ----SD---- C:\ProgramData\Microsoft
2018-05-28 14:35:49 ----RD---- C:\Users
2018-05-28 14:35:19 ----D---- C:\Program Files\Elantech
2018-05-28 14:35:06 ----D---- C:\ProgramData\rtkSSTSetting
2018-05-28 14:34:56 ----D---- C:\WINDOWS\system32\DAX2
2018-05-28 14:34:50 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-05-28 14:34:48 ----D---- C:\WINDOWS\SYSWOW64\sda
2018-05-28 14:33:56 ----HD---- C:\Recovery
2018-05-27 08:17:54 ----D---- C:\Program Files\Opera
2018-05-26 09:27:49 ----D---- C:\ProgramData\Package Cache
2018-05-26 09:25:27 ----D---- C:\Users\breta\AppData\Roaming\TunnelBear
2018-05-18 11:01:56 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-18 11:01:54 ----AD---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2018-03-02 199440]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2018-03-02 343752]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2018-03-02 57680]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2018-05-28 85968]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2018-05-28 381552]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2016-09-20 795640]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2018-05-28 196640]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2018-03-02 227504]
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [2018-05-28 234560]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2018-05-28 111360]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2018-05-28 1027720]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2018-05-28 460520]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2018-05-28 159120]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2018-05-28 205976]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2017-04-24 605616]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 dtlitescsibus;@oem8.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-01-20 30264]
R3 dtliteusbbus;@oem4.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-01-20 47672]
R3 ETDI2C;@oem23.inf,%ELANI2CDeviceDesc%;ELAN I2C Filter Driver; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [2016-08-17 217688]
R3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\System32\drivers\ew_jubusenum.sys [2013-11-30 91648]
R3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igdkmd64.sys [2017-02-07 11041776]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-08-22 5276168]
R3 IntcDAud;@oem12.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-10-06 821224]
R3 LMDriver;@oem47.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2018-05-15 31000]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2018-06-12 253664]
R3 MEIx64;@oem6.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-04 185896]
R3 Qcamain10x64;@oem46.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN 11AC device driver; C:\WINDOWS\system32\DRIVERS\Qcamain10x64.sys [2017-11-08 2328488]
R3 RadioShim;@oem47.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\WINDOWS\System32\drivers\RadioShim.sys [2018-05-15 25368]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 rt640x64;@oem26.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-08-22 943112]
R3 RTSPER;@oem17.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2016-08-04 779232]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2018-05-28 46968]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;@oem30.inf,%busupper.SVCDESC%;huawei_CompositeFilter; C:\WINDOWS\System32\drivers\ew_usbenumfilter.sys [2012-12-22 14976]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 hwusb_cdcacm;hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [2014-06-11 124800]
S3 hwusb_wwanecm;hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [2014-05-04 379392]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\DRIVERS\AdminService.exe [2017-04-24 347056]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-05-28 317280]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2017-03-20 2278616]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_1eba2;CDPUserSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-05-24 8652976]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2016-09-20 17976]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe [2017-02-07 350704]
R2 IntelSSTSvc;Intel SST Parameter Service; C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe [2016-07-12 26608]
R2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2016-02-05 8704]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-02-12 209184]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-02-12 415520]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-03-03 6440736]
R2 MbnExt;Mobile Broadband Extension Service; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 OneSyncSvc_1eba2;OneSyncSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 OpenVPNServiceInteractive;OpenVPN Interactive Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-05-28 7620096]
R3 BcastDVRUserService_1eba2;BcastDVRUserService_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2018-01-12 3480768]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-28 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 PimIndexMaintenanceSvc_1eba2;PimIndexMaintenanceSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 QALSvc;Quick Access Local Service; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [2016-09-14 441136]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2016-09-14 482608]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 MessagingService_1eba2;MessagingService_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_1eba2;BluetoothUserService_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe [2017-02-07 310256]
S3 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe [2017-02-07 488944]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_1eba2;DevicePickerUserSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_1eba2;DevicesFlowUserSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-01-14 976848]
S3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2016-02-05 335872]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-18 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 OpenVPNService;OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [2016-11-25 15872]
S3 OpenVPNServiceLegacy;OpenVPN Legacy Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-05-24 212144]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_1eba2;PrintWorkflowUserSvc_1eba2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Re: Problém s NTB - programy padají

#3 Příspěvek od breta21 »

# -------------------------------
# Malwarebytes AdwCleaner 7.2.0.0
# -------------------------------
# Build: 06-05-2018
# Database: 2018-06-12.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-13-2018
# Duration: 00:00:05
# OS: Windows 10 Home
# Cleaned: 29
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\breta\AppData\Local\Host App Service
Deleted C:\Users\defaultuser0\AppData\Local\Host App Service
Deleted C:\Users\Public\Desktop\..\App Explorer
Deleted C:\Users\Public\Documents\Downloaded Installers
Deleted C:\Users\breta\AppData\Local\slimware utilities inc

***** [ Files ] *****

Deleted C:\Windows\System32\Tasks_Migrated\App Explorer

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\App Explorer

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKU\S-1-5-21-1885444895-1151541194-3766610177-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKCU\Software\Host App Service
Deleted HKU\S-1-5-21-1885444895-1151541194-3766610177-1000\Software\Host App Service
Deleted HKU\S-1-5-20\Software\Host App Service
Deleted HKU\S-1-5-19\Software\Host App Service
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}
Deleted HKLM\Software\Wow6432Node\Classes\AppID\OverlayIcon.DLL
Deleted HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted HKLM\Software\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted HKLM\Software\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{383720A8-B9B1-4161-B1F9-A9C083B0C8AA}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\App Explorer
Deleted HKLM\Software\Wow6432Node\SLIMWARE UTILITIES, INC.
Deleted HKCU\Software\SlimWare Utilities Inc
Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc

***** [ Chromium (and derivatives) ] *****

Deleted Amazon Assistant for Chrome

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

Deleted Amazon Assistant for Firefox

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3770 octets] - [13/06/2018 07:14:12]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#4 Příspěvek od Rudy »

Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Re: Problém s NTB - programy padají

#5 Příspěvek od breta21 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by breta at 2018-06-13 15:16:39
Microsoft Windows 10 Home
System drive C: has 133 GB (55%) free of 243 GB
Total RAM: 3970 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:16:41, on 13.06.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Users\breta\Desktop\RGC\Ranked Gaming Client\rgc.exe
C:\Program Files\trend micro\breta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer17win10.msn.com/?pc=ACTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer17win10.msn.com/?pc=ACTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [OneDrive] "C:\Users\breta\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Lync] C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe /fromrunkey
O4 - HKCU\..\Run: [Viber] "C:\Users\breta\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - Startup: Sync.LNK = C:\Users\breta\AppData\Local\Programs\Sync\sync-taskbar.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\DRIVERS\AdminService.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel SST Parameter Service (IntelSSTSvc) - Unknown owner - C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe (file missing)
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: OpenVPNService - - C:\Program Files\OpenVPN\bin\openvpnserv2.exe
O23 - Service: OpenVPN Interactive Service (OpenVPNServiceInteractive) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: OpenVPN Legacy Service (OpenVPNServiceLegacy) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Quick Access Local Service (QALSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
O23 - Service: Quick Access Service (QASvc) - Acer Incorporated - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - Unknown owner - C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 11975 bytes

======Listing Processes======








winlogon.exe


c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
"C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s WwanSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection

C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
"c:\program files\openvpn\bin\openvpnserv.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\WINDOWS\System32\svchost.exe -k utcsvc -p

C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\DRIVERS\AdminService.exe
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
C:\WINDOWS\SysWOW64\svchost.exe -k MbnExt
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc

C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer Quick Access\QALSvc.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\Acer\Acer Quick Access\QAAgent.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe"
"C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /TRUEHARMONY
AvastUI.exe /nogui
c:\windows\system32\svchost.exe -k unistacksvcgroup
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s SmsRouter
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc

c:\windows\system32\svchost.exe -k netsvcs -p
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\breta\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-1885444895-1151541194-3766610177-1001 -c 728 -s 420 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe" -s
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe" -ServerName:App.AppX495fygk72hjw82j58ny5h3nr8hpsd8vs.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
"C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\breta\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\breta\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\breta\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=67.0.3396.87 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffb19713228,0x7ffb19713238,0x7ffb19713248
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=1928 --on-initialized-event-handle=708 --parent-handle=712 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=D9F93CF9755D253D9778440330499959 --mojo-platform-channel-handle=1420 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=55904D244005BD8515BD81A729361823 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=55904D244005BD8515BD81A729361823 --renderer-client-id=3 --mojo-platform-channel-handle=2900 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=D29B152BA425B9D4B413C87CF70D2AF1 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=D29B152BA425B9D4B413C87CF70D2AF1 --renderer-client-id=4 --mojo-platform-channel-handle=3296 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=95E874C8288C3CFF2C0C9FC482F7619D --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=95E874C8288C3CFF2C0C9FC482F7619D --renderer-client-id=5 --mojo-platform-channel-handle=3364 /prefetch:1
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=F8F02B3711DE5E3633D08903AE91DB08 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=F8F02B3711DE5E3633D08903AE91DB08 --renderer-client-id=23 --mojo-platform-channel-handle=6240 /prefetch:1
C:\WINDOWS\system32\AUDIODG.EXE 0x574
"C:\Users\breta\Desktop\RGC\Ranked Gaming Client\rgc.exe" -patched
"war3.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=6B52B3BF84D2C3816C481B08A4167CAF --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6B52B3BF84D2C3816C481B08A4167CAF --renderer-client-id=115 --mojo-platform-channel-handle=1004 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1885444895-1151541194-3766610177-100122_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1885444895-1151541194-3766610177-100122 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 724 728 736 8192 732
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=38E08917A067A889655586EEB18C5A64 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=38E08917A067A889655586EEB18C5A64 --renderer-client-id=117 --mojo-platform-channel-handle=9992 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=ABEC9B2190A88C1D3E1D09361800C8A4 --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=ABEC9B2190A88C1D3E1D09361800C8A4 --renderer-client-id=118 --mojo-platform-channel-handle=8716 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=BA75C7E5234EE74DB82808184ABB01FC --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=BA75C7E5234EE74DB82808184ABB01FC --renderer-client-id=120 --mojo-platform-channel-handle=6108 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1400,8159261293227220613,16133333921333413291,131072 --service-pipe-token=37039847B5C2013C8B4AF451E1AD4248 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=37039847B5C2013C8B4AF451E1AD4248 --renderer-client-id=121 --mojo-platform-channel-handle=9964 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\breta\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\extensions\
partnerdefaults@mozilla.com

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2016-09-20 71168]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-08-22 16695816]
"RtHDVBg_TrueHarmony"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-08-22 1462792]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-05-28 242904]
"MouseDriver"=C:\WINDOWS\system32\TiltWheelMouse.exe [2013-04-09 241152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2018-04-12 20488312]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2014-09-19 89600]
""= []
"OneDrive"=C:\Users\breta\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-03 1624224]
"Lync"=C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [2018-05-31 23838384]
"Viber"=C:\Users\breta\AppData\Local\Viber\Viber.exe [2018-06-01 40255560]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-05-24 18364648]

C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sync.LNK - C:\Users\breta\AppData\Local\Programs\Sync\sync-taskbar.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-13 07:13:22 ----D---- C:\AdwCleaner
2018-06-12 21:14:25 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2018-06-12 21:12:29 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-06-10 19:49:38 ----D---- C:\ProgramData\Gemfor
2018-06-10 18:19:57 ----D---- C:\ProgramData\T-Mobile
2018-06-10 18:19:27 ----D---- C:\Users\breta\AppData\Roaming\T-Mobile
2018-06-10 18:19:27 ----D---- C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604}
2018-06-10 18:19:23 ----D---- C:\Program Files (x86)\T-Mobile
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01007.dll
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewusbwwan.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewusbmdm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ewdcsc.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_wwanecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_juwwanecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_juextctrl.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcecm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_jubusenum.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_hwupgrade.sys
2018-06-10 18:19:09 ----A---- C:\WINDOWS\system32\drivers\ew_cdcacm.sys
2018-06-10 18:18:59 ----D---- C:\Program Files (x86)\Huawei
2018-05-28 15:29:39 ----AS---- C:\WINDOWS\bootstat.dat
2018-05-28 15:28:43 ----D---- C:\WINDOWS\system32\Microsoft
2018-05-28 15:28:43 ----D---- C:\WINDOWS\ServiceProfiles
2018-05-28 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-05-28 15:26:42 ----A---- C:\WINDOWS\system32\wmp.dll
2018-05-28 15:26:38 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\jscript.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-05-28 15:26:37 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\winload.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wininet.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\tzres.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\tquery.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\shell32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\msi.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\itss.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\credssp.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\cdp.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-28 15:26:34 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2018-05-28 15:26:33 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-05-28 15:22:02 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-05-28 15:22:01 ----D---- C:\Program Files\Reference Assemblies
2018-05-28 15:22:01 ----D---- C:\Program Files\MSBuild
2018-05-28 15:22:01 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-05-28 15:22:01 ----D---- C:\Program Files (x86)\MSBuild
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-28 15:21:54 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-05-28 15:21:35 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-05-28 15:21:35 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNHMCA6.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVL.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVI.dll
2018-05-28 15:19:34 ----A---- C:\WINDOWS\system32\CNC_BVC.dll
2018-05-28 15:19:32 ----A---- C:\WINDOWS\system32\CNMLMBV.DLL
2018-05-28 14:41:32 ----D---- C:\WINDOWS\system32\drivers\wd
2018-05-28 14:40:18 ----A---- C:\WINDOWS\system32\aswBoot.exe
2018-05-28 14:39:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-28 14:37:13 ----ASH---- C:\hiberfil.sys
2018-05-28 14:36:20 ----D---- C:\ProgramData\USOShared
2018-05-28 14:35:48 ----SD---- C:\Users\breta\AppData\Roaming\Microsoft
2018-05-28 14:35:06 ----D---- C:\WINDOWS\system32\IntelSSTAPO
2018-05-28 14:34:47 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2018-05-28 14:34:47 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-05-28 14:34:45 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-05-28 14:33:53 ----D---- C:\WINDOWS\Prefetch
2018-05-28 14:33:46 ----D---- C:\WINDOWS\system32\SleepStudy
2018-05-28 14:33:46 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-26 09:09:13 ----D---- C:\SZ
2018-05-22 11:47:16 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-06-13 15:16:40 ----D---- C:\Program Files\trend micro
2018-06-13 15:10:51 ----D---- C:\WINDOWS\Temp
2018-06-13 14:30:33 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-13 14:21:16 ----D---- C:\WINDOWS\system32\sru
2018-06-13 12:26:34 ----D---- C:\Program Files\Opera
2018-06-13 07:20:11 ----D---- C:\WINDOWS\System32
2018-06-13 07:20:11 ----D---- C:\WINDOWS\INF
2018-06-13 07:15:34 ----D---- C:\WINDOWS\system32\Tasks
2018-06-13 07:15:16 ----D---- C:\WINDOWS\system32\drivers
2018-06-13 07:15:16 ----D---- C:\Program Files (x86)\TunnelBear
2018-06-13 07:14:49 ----D---- C:\WINDOWS\system32\catroot2
2018-06-13 07:14:39 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-06-12 21:17:10 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-12 21:16:55 ----D---- C:\WINDOWS\system32\WDI
2018-06-12 21:15:10 ----D---- C:\WINDOWS\system32\DriverStore
2018-06-12 21:14:25 ----D---- C:\WINDOWS\SysWOW64
2018-06-12 21:14:13 ----D---- C:\WINDOWS\AppReadiness
2018-06-12 21:09:52 ----SHD---- C:\System Volume Information
2018-06-12 21:03:44 ----D---- C:\WINDOWS\CbsTemp
2018-06-12 21:01:40 ----D---- C:\WINDOWS\Logs
2018-06-12 20:34:40 ----D---- C:\Users\breta\AppData\Roaming\ViberPC
2018-06-12 18:44:52 ----D---- C:\WINDOWS\system32\config
2018-06-12 18:44:47 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-10 19:50:46 ----RD---- C:\Program Files (x86)
2018-06-10 19:49:38 ----HD---- C:\ProgramData
2018-06-10 18:15:39 ----D---- C:\WINDOWS\system32\NDF
2018-06-10 12:20:14 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-06-10 08:32:14 ----HD---- C:\Program Files\WindowsApps
2018-06-09 20:02:41 ----D---- C:\WINDOWS\WinSxS
2018-06-07 11:43:00 ----SHD---- C:\WINDOWS\Installer
2018-06-07 11:42:33 ----D---- C:\Program Files (x86)\Common Files
2018-06-07 11:41:06 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-06-05 21:04:19 ----D---- C:\Program Files\Highresolution Enterprises
2018-06-05 11:02:13 ----D---- C:\noveeeeeeeeeee
2018-06-04 18:50:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-02 08:52:08 ----D---- C:\WINDOWS\Tasks
2018-05-30 14:29:28 ----D---- C:\WINDOWS\debug
2018-05-30 06:55:49 ----D---- C:\Program Files (x86)\Acer
2018-05-29 22:13:29 ----RD---- C:\WINDOWS\assembly
2018-05-29 07:21:13 ----D---- C:\WINDOWS\appcompat
2018-05-28 16:47:07 ----D---- C:\WINDOWS\system32\restore
2018-05-28 15:33:31 ----RSD---- C:\WINDOWS\Fonts
2018-05-28 15:33:31 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\spool
2018-05-28 15:33:31 ----D---- C:\WINDOWS\system32\drivers\etc
2018-05-28 15:33:30 ----RD---- C:\Program Files
2018-05-28 15:33:30 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\Recovery
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\oobe
2018-05-28 15:33:30 ----D---- C:\WINDOWS\system32\ihvmanager
2018-05-28 15:33:30 ----D---- C:\WINDOWS\oem
2018-05-28 15:33:30 ----D---- C:\WINDOWS\LiveKernelReports
2018-05-28 15:33:30 ----D---- C:\Program Files\Intel
2018-05-28 15:33:30 ----D---- C:\Program Files\Common Files\microsoft shared
2018-05-28 15:33:30 ----D---- C:\Program Files\Common Files
2018-05-28 15:33:30 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-28 15:33:30 ----AD---- C:\Program Files\UNP
2018-05-28 15:33:28 ----D---- C:\WINDOWS\Setup
2018-05-28 15:30:32 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2018-05-28 15:30:10 ----D---- C:\Program Files (x86)\Windows Mail
2018-05-28 15:30:09 ----D---- C:\Program Files\Windows Mail
2018-05-28 15:30:09 ----D---- C:\Program Files\Realtek
2018-05-28 15:27:20 ----D---- C:\WINDOWS\TextInput
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\zu-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\yo-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\xh-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\wo-SN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\vi-VN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ur-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ug-CN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tt-RU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tn-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tk-TM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ti-ET
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\te-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ta-in
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sw-KE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sq-AL
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\si-lk
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\setup
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\rw-RW
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\quz-PE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\prs-AF
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\pa-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\or-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\nso-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\nn-NO
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ne-NP
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mt-MT
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ms-MY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mr-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mn-MN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ml-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mk-MK
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\mi-NZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\lo-LA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\lb-LU
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ky-KG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kok-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\km-KH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\kk-KZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ka-GE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\is-IS
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ig-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\id-ID
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\hy-AM
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\gu-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\gd-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ga-IE
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\fil-PH
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\fa-IR
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\en-US
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\cy-GB
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\cs-CZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\Boot
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bn-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\bn-BD
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\be-BY
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\as-IN
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\appraiser
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\am-et
2018-05-28 15:27:20 ----D---- C:\WINDOWS\system32\af-ZA
2018-05-28 15:27:20 ----D---- C:\WINDOWS\Provisioning
2018-05-28 15:27:20 ----D---- C:\WINDOWS\bcastdvr
2018-05-28 15:27:20 ----D---- C:\WINDOWS\apppatch
2018-05-28 15:27:20 ----D---- C:\Program Files\Windows Photo Viewer
2018-05-28 15:27:20 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-05-28 15:24:30 ----SD---- C:\WINDOWS\SYSWOW64\F12
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\winrm
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\WCN
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2018-05-28 15:24:30 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2018-05-28 15:24:29 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2018-05-28 15:24:29 ----SD---- C:\WINDOWS\system32\F12
2018-05-28 15:24:29 ----D---- C:\WINDOWS\SYSWOW64\en
2018-05-28 15:24:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\winrm
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\WCN
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\slmgr
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2018-05-28 15:24:29 ----D---- C:\WINDOWS\system32\migwiz
2018-05-28 15:24:28 ----SD---- C:\WINDOWS\system32\DiagSvcs
2018-05-28 15:24:28 ----D---- C:\WINDOWS\system32\en
2018-05-28 15:24:28 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-05-28 15:24:28 ----D---- C:\WINDOWS\servicing
2018-05-28 15:24:28 ----D---- C:\WINDOWS\en-US
2018-05-28 15:24:28 ----D---- C:\Program Files\Windows Media Player
2018-05-28 15:24:28 ----D---- C:\Program Files\Windows Defender
2018-05-28 15:24:28 ----D---- C:\Program Files (x86)\Windows Media Player
2018-05-28 15:24:28 ----D---- C:\Program Files (x86)\Windows Defender
2018-05-28 15:22:02 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-05-28 15:22:02 ----D---- C:\WINDOWS\system32\MUI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-05-28 15:21:37 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-05-28 15:21:36 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\zh-TW
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\zh-CN
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\uk-UA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\tr-TR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\th-TH
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sv-SE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sl-SI
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\sk-SK
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ru-RU
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ro-RO
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pt-PT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pt-BR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\pl-PL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\nl-NL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\nb-NO
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\lv-LV
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\lt-LT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ko-KR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ja-jp
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\it-IT
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\hu-HU
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\hr-HR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\he-IL
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fr-FR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fr-CA
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\fi-FI
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\et-EE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\es-MX
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\es-ES
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\en-GB
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\el-GR
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\de-DE
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\da-DK
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\bg-BG
2018-05-28 15:21:36 ----D---- C:\WINDOWS\system32\ar-SA
2018-05-28 14:48:11 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-05-28 14:41:43 ----D---- C:\WINDOWS\SoftwareDistribution
2018-05-28 14:41:36 ----D---- C:\Program Files\windows nt
2018-05-28 14:41:11 ----D---- C:\Windows
2018-05-28 14:41:06 ----D---- C:\WINDOWS\Registration
2018-05-28 14:39:33 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-05-28 14:39:25 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-05-28 14:39:01 ----D---- C:\WINDOWS\system32\wbem
2018-05-28 14:38:58 ----SD---- C:\ProgramData\Microsoft
2018-05-28 14:35:49 ----RD---- C:\Users
2018-05-28 14:35:19 ----D---- C:\Program Files\Elantech
2018-05-28 14:35:06 ----D---- C:\ProgramData\rtkSSTSetting
2018-05-28 14:34:56 ----D---- C:\WINDOWS\system32\DAX2
2018-05-28 14:34:50 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-05-28 14:34:48 ----D---- C:\WINDOWS\SYSWOW64\sda
2018-05-28 14:33:56 ----HD---- C:\Recovery
2018-05-26 09:27:49 ----D---- C:\ProgramData\Package Cache
2018-05-26 09:25:27 ----D---- C:\Users\breta\AppData\Roaming\TunnelBear
2018-05-18 11:01:56 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-18 11:01:54 ----AD---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2018-03-02 199440]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2018-03-02 343752]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2018-03-02 57680]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2018-05-28 85968]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2018-05-28 381552]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2016-09-20 795640]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2018-05-28 196640]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2018-03-02 227504]
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [2018-05-28 234560]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2018-05-28 111360]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2018-05-28 1027720]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2018-05-28 460520]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2018-05-28 159120]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2018-05-28 205976]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2017-04-24 605616]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 dtlitescsibus;@oem8.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-01-20 30264]
R3 dtliteusbbus;@oem4.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-01-20 47672]
R3 ETDI2C;@oem23.inf,%ELANI2CDeviceDesc%;ELAN I2C Filter Driver; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [2016-08-17 217688]
R3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\System32\drivers\ew_jubusenum.sys [2013-11-30 91648]
R3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igdkmd64.sys [2017-02-07 11041776]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-08-22 5276168]
R3 IntcDAud;@oem12.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-10-06 821224]
R3 LMDriver;@oem47.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2018-05-15 31000]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2018-06-13 253664]
R3 MEIx64;@oem6.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-04 185896]
R3 Qcamain10x64;@oem46.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN 11AC device driver; C:\WINDOWS\system32\DRIVERS\Qcamain10x64.sys [2017-11-08 2328488]
R3 RadioShim;@oem47.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\WINDOWS\System32\drivers\RadioShim.sys [2018-05-15 25368]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 rt640x64;@oem26.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-08-22 943112]
R3 RTSPER;@oem17.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2016-08-04 779232]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2018-05-28 46968]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;@oem30.inf,%busupper.SVCDESC%;huawei_CompositeFilter; C:\WINDOWS\System32\drivers\ew_usbenumfilter.sys [2012-12-22 14976]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 hwusb_cdcacm;hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [2014-06-11 124800]
S3 hwusb_wwanecm;hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [2014-05-04 379392]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\DRIVERS\AdminService.exe [2017-04-24 347056]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-05-28 317280]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2017-03-20 2278616]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_5f6c2;Uživatelská služba platformy připojených zařízení_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-05-24 8652976]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2016-09-20 17976]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe [2017-02-07 350704]
R2 IntelSSTSvc;Intel SST Parameter Service; C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe [2016-07-12 26608]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-02-12 209184]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-02-12 415520]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-03-03 6440736]
R2 MbnExt;Mobile Broadband Extension Service; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 OneSyncSvc_5f6c2;Hostitel synchronizace_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 OpenVPNServiceInteractive;OpenVPN Interactive Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-05-28 7620096]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2018-01-12 3480768]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-28 43648]
R3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2016-02-05 335872]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 PimIndexMaintenanceSvc_5f6c2;Data kontaktů_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 QALSvc;Quick Access Local Service; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [2016-09-14 441136]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2016-09-14 482608]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15 153168]
S2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2016-02-05 8704]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 MessagingService_5f6c2;Služba zasílání zpráv_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_5f6c2;Uživatelská služba pro GameDVR a vysílání her_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_5f6c2;Služba pro podporu uživatelů Bluetooth_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe [2017-02-07 310256]
S3 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe [2017-02-07 488944]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_5f6c2;DevicePicker_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_5f6c2;Tok zařízení_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-01-14 976848]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-18 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 OpenVPNService;OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [2016-11-25 15872]
S3 OpenVPNServiceLegacy;OpenVPN Legacy Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-05-24 212144]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_5f6c2;PrintWorkflow_5f6c2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#6 Příspěvek od Rudy »

Rudy píše:Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Toto není FRST, ale RSIT. Z něj nemohu v desítkách mazat, riskoval bych poškození systému.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Re: Problém s NTB - programy padají

#7 Příspěvek od breta21 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06.06.2018 01
Ran by breta (administrator) on LAPTOP-RCMATI0H (13-06-2018 17:10:01)
Running from C:\Users\breta\Desktop
Loaded Profiles: breta (Available Profiles: defaultuser0 & breta)
Platform: Windows 10 Home Version 1803 17134.48 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
(Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
() C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.1.18.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Ranked Gaming) C:\Users\breta\Desktop\RGC\Ranked Gaming Client\rgc.exe
(Blizzard Entertainment) C:\Warcraft III RoC + TFT v1.26 Complete -IceBlitz\Warcraft III 1.26 -IceBlitz\war3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\breta\Desktop\FRSTLauncher (1).exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16695816 2016-08-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1462792 2016-08-22] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-28] (AVAST Software)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [ShowBatteryBar] => C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2014-09-19] ()
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [] => [X]
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23838384 2018-05-31] (Microsoft Corporation)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [Viber] => C:\Users\breta\AppData\Local\Viber\Viber.exe [40255560 2018-06-01] (Viber Media S.à r.l.)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18364648 2018-05-24] (Piriform Ltd)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b0187-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b01d2-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
Startup: C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sync.LNK [2018-01-20]
ShortcutTarget: Sync.LNK -> C:\Users\breta\AppData\Local\Programs\Sync\sync-taskbar.exe (Sync.com Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26c323b0-5e78-4dd9-b8f1-a22bff627736}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5cbbdb09-6f6e-4358-b37e-be6ca6f4f22c}: [DhcpNameServer] 213.192.40.6 213.192.40.10

Internet Explorer:
==================
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001 -> DefaultScope {A9E6B20B-3626-4F6D-9E89-81AAFF5D2D43} URL =
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-31] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-31] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: jsyg594b.default
FF DefaultProfile: 3fa1oxu4.default
FF ProfilePath: C:\Users\breta\AppData\Roaming\Zotero\Zotero\Profiles\jsyg594b.default [2018-02-25]
FF Extension: (Zotero LibreOffice Integration) - C:\Program Files (x86)\Zotero\extensions\zoteroOpenOfficeIntegration@zotero.org [2018-02-21] [Legacy] [not signed]
FF Extension: (Zotero Word for Windows Integration) - C:\Program Files (x86)\Zotero\extensions\zoteroWinWordIntegration@zotero.org [2018-02-21] [Legacy] [not signed]
FF ProfilePath: C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default [2018-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2018-03-27]
FF Extension: (Mozilla Partner Defaults) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\partnerdefaults@mozilla.com [2017-12-14] [Legacy]
FF Extension: (Avast SafePrice) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\sp@avast.com.xpi [2018-03-25]
FF Extension: (Avast Online Security) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\wrc@avast.com.xpi [2017-12-15]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2017-02-11] [Legacy]
FF Extension: (Czech (CZ) Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-cs@firefox.mozilla.org [2017-02-11] [Legacy]
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2017-02-11] [Legacy]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-02] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR Profile: C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default [2018-06-13]
CHR Extension: (Dokumenty) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-15]
CHR Extension: (Disk Google) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-15]
CHR Extension: (YouTube) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-15]
CHR Extension: (uBlock Origin) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-05-28]
CHR Extension: (Full Page Screen Capture) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2018-06-13]
CHR Extension: (Cookie AutoDelete) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhcgjolkccmbidfldomjliifgaodjagh [2018-05-26]
CHR Extension: (AdBlock) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-05-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (TunnelBear VPN) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\omdakjcmkglenbhjadbccaookpfjihpa [2018-04-05]
CHR Extension: (Gmail) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-15]
CHR Extension: (Chrome Media Router) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-09]
CHR Profile: C:\Users\breta\AppData\Local\Google\Chrome\User Data\System Profile [2018-04-11]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (Stormcrow) - C:\Users\breta\AppData\Roaming\Opera Software\Opera Stable\Extensions\eenddkdfifnnmgbohackpefaggccbcgp [2018-02-19]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-28] (AVAST Software)
R2 AtherosSvc; C:\WINDOWS\system32\DRIVERS\AdminService.exe [347056 2017-04-24] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-28] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278616 2017-03-20] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8652976 2018-05-24] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480768 2018-01-12] (Disc Soft Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [976848 2016-01-14] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-02-05] (Intel Corporation) [File not signed]
R2 IntelSSTSvc; C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe [26608 2016-07-12] (Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-02-05] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-02-12] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-03] (Malwarebytes)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\MbnExt.dll [422608 2017-04-13] (Gemfor s.r.o.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [441136 2016-09-14] (Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [482608 2016-09-14] (Acer Incorporated)
S3 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [117120 2018-05-07] ()
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [295840 2016-05-28] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196640 2018-05-28] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-03-02] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-03-02] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-03-02] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-03-02] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [234560 2018-05-28] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-05-28] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [159120 2018-05-28] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111360 2018-05-28] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85968 2018-05-28] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1027720 2018-05-28] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-05-28] (AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-05-28] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381552 2018-05-28] (AVAST Software)
R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [605616 2017-04-24] (Qualcomm)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-20] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-20] (Disc Soft Ltd)
R3 ETDI2C; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [217688 2016-08-17] (ELAN Microelectronic Corp.)
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-22] (Realtek )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [779232 2016-08-04] (Realsil Semiconductor Corporation)
R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-01-31] (The OpenVPN Project)
S3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-13 17:10 - 2018-06-13 17:10 - 000021658 _____ C:\Users\breta\Desktop\FRST.txt
2018-06-13 17:09 - 2018-06-13 17:09 - 000112640 _____ (forum.viry.cz) C:\Users\breta\Desktop\FRSTLauncher (1).exe
2018-06-13 17:09 - 2018-06-13 17:09 - 000029696 _____ C:\Users\breta\AppData\Local\MSGBOX.EXE
2018-06-13 17:09 - 2018-06-13 17:09 - 000015327 _____ C:\Users\breta\Desktop\LM.bat
2018-06-13 17:08 - 2018-06-13 17:10 - 000000000 ____D C:\FRST
2018-06-13 17:07 - 2018-06-13 17:09 - 000112640 _____ (forum.viry.cz) C:\Users\breta\Desktop\FRSTLauncher.exe
2018-06-13 17:06 - 2018-06-13 17:06 - 002413056 _____ (Farbar) C:\Users\breta\Desktop\FRST64.exe
2018-06-13 16:05 - 2018-06-13 16:05 - 000247244 _____ C:\Users\breta\Desktop\prilohy_181074.zip
2018-06-13 07:30 - 2018-01-13 15:17 - 000000923 _____ C:\Users\breta\Desktop\script-registrace - kopie.html
2018-06-13 07:13 - 2018-06-13 07:14 - 000000000 ____D C:\AdwCleaner
2018-06-13 07:13 - 2018-06-13 07:13 - 007372496 _____ (Malwarebytes) C:\Users\breta\Desktop\adwcleaner_7.2.0.exe
2018-06-12 21:19 - 2018-06-12 21:19 - 000000000 ____D C:\Users\breta\AppData\Local\OEM
2018-06-12 21:15 - 2018-06-12 21:16 - 001222144 _____ C:\Users\breta\Desktop\RSITx64.exe
2018-06-11 14:26 - 2018-06-11 14:26 - 000192149 _____ C:\Users\breta\Desktop\praca.pdf
2018-06-11 10:47 - 2018-06-11 08:55 - 000022052 _____ C:\Users\breta\Desktop\studium-konec.pdf
2018-06-10 19:49 - 2018-06-10 19:49 - 000000000 ____D C:\ProgramData\Gemfor
2018-06-10 18:19 - 2018-06-10 19:50 - 000001306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Mobile Internet Manager.lnk
2018-06-10 18:19 - 2018-06-10 19:50 - 000001209 _____ C:\Users\defaultuser0\Desktop\T-Mobile Internet Manager.lnk
2018-06-10 18:19 - 2018-06-10 19:50 - 000001209 _____ C:\Users\Default\Desktop\T-Mobile Internet Manager.lnk
2018-06-10 18:19 - 2018-06-10 19:50 - 000001209 _____ C:\Users\Default User\Desktop\T-Mobile Internet Manager.lnk
2018-06-10 18:19 - 2018-06-10 19:50 - 000001209 _____ C:\Users\breta\Desktop\T-Mobile Internet Manager.lnk
2018-06-10 18:19 - 2018-06-10 19:50 - 000000000 ____D C:\Program Files (x86)\T-Mobile
2018-06-10 18:19 - 2018-06-10 18:19 - 000000000 ____D C:\Users\breta\AppData\Roaming\T-Mobile
2018-06-10 18:19 - 2018-06-10 18:19 - 000000000 ____D C:\ProgramData\T-Mobile
2018-06-10 18:19 - 2018-06-10 18:19 - 000000000 ____D C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604}
2018-06-10 18:19 - 2014-06-11 03:22 - 000124800 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_cdcacm.sys
2018-06-10 18:19 - 2014-05-04 10:26 - 000379392 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_wwanecm.sys
2018-06-10 18:19 - 2014-03-27 02:19 - 000457728 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbwwan.sys
2018-06-10 18:19 - 2013-11-30 11:11 - 000246272 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juwwanecm.sys
2018-06-10 18:19 - 2013-11-30 11:10 - 000110592 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcacm.sys
2018-06-10 18:19 - 2013-11-30 11:10 - 000091648 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jubusenum.sys
2018-06-10 18:19 - 2013-11-30 11:10 - 000077312 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcecm.sys
2018-06-10 18:19 - 2013-11-30 11:10 - 000030720 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juextctrl.sys
2018-06-10 18:19 - 2013-11-30 10:55 - 000226176 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbmdm.sys
2018-06-10 18:19 - 2013-01-25 03:16 - 000109568 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwusbdev.sys
2018-06-10 18:19 - 2012-12-22 03:46 - 000014976 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbenumfilter.sys
2018-06-10 18:19 - 2012-08-20 02:37 - 001490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll
2018-06-10 18:19 - 2012-08-20 02:37 - 001490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01007.dll
2018-06-10 18:19 - 2010-10-08 10:59 - 000032768 _____ (Huawei Tech. Co., Ltd.) C:\WINDOWS\system32\Drivers\ewdcsc.sys
2018-06-10 18:19 - 2010-09-26 12:09 - 000022016 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwupgrade.sys
2018-06-10 18:18 - 2018-06-10 18:18 - 000000000 ____D C:\Program Files (x86)\Huawei
2018-06-08 11:11 - 2018-06-08 11:11 - 000000700 _____ C:\Users\breta\Desktop\SZ – zástupce.lnk
2018-06-06 09:56 - 2018-06-06 09:56 - 000000000 ____D C:\Users\breta\AppData\Local\Viber
2018-06-05 21:10 - 2018-06-05 21:10 - 000000000 ____D C:\Users\breta\AppData\Local\D3DSCache
2018-06-05 20:41 - 2018-06-05 20:42 - 002199915 _____ C:\Users\breta\Downloads\DotA Allstars 6.88w3 (1).w3x.opdownload
2018-06-05 20:39 - 2018-06-05 20:41 - 002350874 _____ C:\Users\breta\Downloads\DotA Allstars 6.88w3.w3x
2018-06-05 11:12 - 2018-06-05 11:12 - 000007104 _____ C:\Users\breta\Desktop\stoly.pdf
2018-06-01 08:56 - 2018-06-01 09:23 - 000000000 ____D C:\Users\breta\Desktop\práce
2018-05-30 17:06 - 2018-06-05 10:43 - 000000000 ____D C:\Users\breta\Desktop\nemec
2018-05-30 06:55 - 2018-05-30 06:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Oem
2018-05-30 06:55 - 2018-05-30 06:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Acer
2018-05-28 15:30 - 2018-05-28 15:33 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-05-28 15:28 - 2018-05-28 15:30 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-05-28 15:28 - 2018-05-28 15:28 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-05-28 15:26 - 2018-05-28 15:26 - 025848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 022707712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 022002688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 019399168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 012712960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 009159064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 007583232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 007436624 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 006569952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 005782528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003732800 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003655168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 003440640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003283400 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002835864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002700800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002486976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002422168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 002170368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001636352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001634800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001456616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-05-28 15:26 - 2018-05-28 15:26 - 001454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001191168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-05-28 15:26 - 2018-05-28 15:26 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000786168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000733992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-05-28 15:26 - 2018-05-28 15:26 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-05-28 15:26 - 2018-05-28 15:26 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000559968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-05-28 15:26 - 2018-05-28 15:26 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000269216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
2018-05-28 15:26 - 2018-05-28 15:26 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-05-28 15:26 - 2018-05-28 15:26 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-05-28 15:22 - 2018-05-28 15:22 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-05-28 15:22 - 2018-05-28 15:22 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-05-28 15:22 - 2018-05-28 15:22 - 000000000 ____D C:\Program Files\MSBuild
2018-05-28 15:22 - 2018-05-28 15:22 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-05-28 15:22 - 2018-05-28 15:22 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-05-28 15:21 - 2018-05-28 15:21 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-05-28 15:21 - 2018-05-28 15:21 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-05-28 15:21 - 2018-05-28 15:21 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-05-28 15:21 - 2018-05-28 15:21 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-05-28 15:21 - 2018-05-28 15:21 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-05-28 15:21 - 2018-05-28 15:21 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-05-28 15:21 - 2018-05-28 15:21 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-28 15:19 - 2013-04-04 06:00 - 000391168 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMBV.DLL
2018-05-28 15:19 - 2013-02-04 16:12 - 000367104 _____ (CANON INC.) C:\WINDOWS\system32\CNC_BVL.dll
2018-05-28 15:19 - 2012-11-26 13:32 - 000088576 _____ C:\WINDOWS\system32\CNC176ED.TBL
2018-05-28 15:19 - 2012-11-08 14:04 - 000282624 _____ (CANON INC.) C:\WINDOWS\system32\CNC_BVC.dll
2018-05-28 15:19 - 2012-11-08 14:03 - 000106496 _____ (CANON INC.) C:\WINDOWS\system32\CNC_BVI.dll
2018-05-28 15:19 - 2008-08-25 19:02 - 000017920 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCA6.dll
2018-05-28 14:44 - 2018-05-28 14:44 - 000001417 _____ C:\Users\breta\Desktop\Microsoft Edge.lnk
2018-05-28 14:41 - 2018-06-13 16:59 - 000004302 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2018-05-28 14:41 - 2018-06-13 16:59 - 000003852 _____ C:\WINDOWS\System32\Tasks\ACCAgent
2018-05-28 14:41 - 2018-06-13 16:59 - 000003692 _____ C:\WINDOWS\System32\Tasks\AcerCMUpdateTask2.1.16258
2018-05-28 14:41 - 2018-06-13 16:59 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-05-28 14:41 - 2018-06-13 16:59 - 000003400 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-28 14:41 - 2018-06-13 16:59 - 000003306 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1518378005
2018-05-28 14:41 - 2018-06-13 16:59 - 000003194 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-05-28 14:41 - 2018-06-13 16:59 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-28 14:41 - 2018-06-13 16:59 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2018-05-28 14:41 - 2018-06-13 16:59 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1885444895-1151541194-3766610177-1001
2018-05-28 14:41 - 2018-06-13 16:59 - 000002820 _____ C:\WINDOWS\System32\Tasks\ACC
2018-05-28 14:41 - 2018-06-13 16:59 - 000002762 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2018-05-28 14:41 - 2018-06-13 16:59 - 000002534 _____ C:\WINDOWS\System32\Tasks\AcerCloud
2018-05-28 14:41 - 2018-06-13 16:59 - 000002328 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication
2018-05-28 14:41 - 2018-06-13 16:59 - 000002256 _____ C:\WINDOWS\System32\Tasks\Power Button
2018-05-28 14:41 - 2018-06-13 16:59 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-05-28 14:41 - 2018-06-13 16:59 - 000002180 _____ C:\WINDOWS\System32\Tasks\Quick Access
2018-05-28 14:41 - 2018-06-13 16:59 - 000002042 _____ C:\WINDOWS\System32\Tasks\FubToolByPLD
2018-05-28 14:41 - 2018-06-13 16:59 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2018-05-28 14:41 - 2018-06-13 13:14 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-05-28 14:41 - 2018-06-13 07:15 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-05-28 14:41 - 2018-05-28 14:41 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2018-05-28 14:41 - 2018-05-28 14:41 - 000011433 _____ C:\WINDOWS\diagerr.xml
2018-05-28 14:41 - 2018-05-28 14:41 - 000002766 _____ C:\WINDOWS\System32\Tasks\UbtFrameworkService
2018-05-28 14:41 - 2018-05-28 14:41 - 000000020 ___SH C:\Users\breta\ntuser.ini
2018-05-28 14:41 - 2018-05-28 14:41 - 000000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2018-05-28 14:41 - 2018-05-28 14:41 - 000000000 ____D C:\WINDOWS\System32\Tasks\CareCenter
2018-05-28 14:41 - 2018-05-28 14:41 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-05-28 14:40 - 2018-05-28 14:40 - 000376536 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-05-28 14:39 - 2018-06-13 07:20 - 001692472 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-28 14:36 - 2018-05-28 14:36 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-05-28 14:36 - 2018-05-28 14:36 - 000000000 ____D C:\ProgramData\USOShared
2018-05-28 14:35 - 2018-05-28 14:41 - 000000000 ____D C:\Users\breta
2018-05-28 14:35 - 2018-05-28 14:38 - 000000000 ____D C:\Users\defaultuser0
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Šablony
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Soubory cookie
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Poslední
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Okolní tiskárny
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Okolní síť
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Nabídka Start
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Dokumenty
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Obrázky
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Hudba
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Filmy
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\Data aplikací
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Data aplikací
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Šablony
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Soubory cookie
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Poslední
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Okolní tiskárny
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Okolní síť
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Nabídka Start
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Dokumenty
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Documents\Obrázky
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Documents\Hudba
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Documents\Filmy
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\Data aplikací
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 _SHDL C:\Users\breta\AppData\Local\Data aplikací
2018-05-28 14:35 - 2018-05-28 14:35 - 000000000 ____D C:\WINDOWS\system32\IntelSSTAPO
2018-05-28 14:35 - 2018-04-12 01:34 - 000001105 _____ C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-05-28 14:35 - 2018-04-12 01:34 - 000001105 _____ C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-05-28 14:35 - 2018-01-20 13:39 - 000002331 _____ C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive (1).lnk
2018-05-28 14:35 - 2018-01-20 13:39 - 000002331 _____ C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive (1).lnk
2018-05-28 14:34 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-05-28 14:34 - 2017-02-07 22:47 - 000122384 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-05-28 14:34 - 2017-02-07 22:47 - 000113176 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2018-05-28 14:33 - 2018-06-13 13:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-05-28 14:33 - 2018-05-28 14:37 - 000401496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-26 09:27 - 2018-05-28 15:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear
2018-05-26 09:09 - 2018-06-13 14:38 - 000000000 ____D C:\SZ
2018-05-25 16:03 - 2018-06-07 11:41 - 000000000 ____D C:\Users\breta\Desktop\prodej
2018-05-22 11:47 - 2018-05-28 14:41 - 000000000 ___DC C:\WINDOWS\Panther

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-13 16:30 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-13 15:16 - 2018-01-20 13:41 - 000000000 ____D C:\Program Files\trend micro
2018-06-13 15:08 - 2018-01-20 14:36 - 000000000 ____D C:\Users\breta\AppData\Local\Packages
2018-06-13 12:26 - 2018-02-11 21:39 - 000000000 ____D C:\Program Files\Opera
2018-06-13 07:20 - 2018-04-12 17:50 - 000717314 _____ C:\WINDOWS\system32\perfh005.dat
2018-06-13 07:20 - 2018-04-12 17:50 - 000145070 _____ C:\WINDOWS\system32\perfc005.dat
2018-06-13 07:20 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-13 07:17 - 2017-12-15 17:12 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-13 07:17 - 2017-12-15 17:12 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-13 07:15 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-13 07:15 - 2018-02-19 17:30 - 000000000 ____D C:\Program Files (x86)\TunnelBear
2018-06-13 07:15 - 2017-12-14 19:40 - 000000000 __SHD C:\Users\breta\IntelGraphicsProfiles
2018-06-13 07:14 - 2018-04-11 23:04 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2018-06-13 07:14 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-06-12 21:31 - 2018-01-21 20:13 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-06-12 21:03 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-12 20:34 - 2018-03-21 15:03 - 000000000 ____D C:\Users\breta\AppData\Roaming\ViberPC
2018-06-11 17:18 - 2018-01-20 12:52 - 000000000 ____D C:\Users\breta\Desktop\poradna
2018-06-10 18:15 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-06-10 08:32 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-07 11:41 - 2017-02-11 05:08 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-05 21:04 - 2018-05-12 22:16 - 000000000 ____D C:\Program Files\Highresolution Enterprises
2018-06-05 11:02 - 2018-01-20 12:50 - 000000000 ____D C:\noveeeeeeeeeee
2018-06-05 10:44 - 2018-04-07 18:51 - 000000000 ____D C:\Users\breta\Desktop\marko
2018-06-04 18:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-04 14:33 - 2018-03-21 15:11 - 000000000 ____D C:\Users\breta\Documents\ViberDownloads
2018-06-04 13:57 - 2018-03-26 13:48 - 000000587 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2018-05-30 06:55 - 2017-02-11 06:03 - 000000000 ____D C:\Program Files (x86)\Acer
2018-05-29 07:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\appcompat
2018-05-28 21:27 - 2017-12-14 19:40 - 000000000 ____D C:\Users\breta\AppData\Local\ConnectedDevicesPlatform
2018-05-28 19:30 - 2018-01-20 16:52 - 000000000 ____D C:\Users\breta\AppData\Local\PlaceholderTileLogoFolder
2018-05-28 15:33 - 2018-04-30 21:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2018-05-28 15:33 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup
2018-05-28 15:33 - 2018-04-12 01:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-05-28 15:33 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-05-28 15:33 - 2018-04-02 15:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-05-28 15:33 - 2018-03-13 11:29 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-05-28 15:33 - 2018-03-13 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series
2018-05-28 15:33 - 2018-02-26 12:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-28 15:33 - 2018-02-01 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-05-28 15:33 - 2018-01-21 20:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-05-28 15:33 - 2018-01-20 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2018-05-28 15:33 - 2018-01-20 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2018-05-28 15:33 - 2018-01-02 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2018-05-28 15:33 - 2017-12-15 21:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2018-05-28 15:33 - 2017-12-15 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2018-05-28 15:33 - 2017-12-14 20:47 - 000000000 ____D C:\Program Files\UNP
2018-05-28 15:33 - 2017-12-14 19:38 - 000000000 ____D C:\WINDOWS\oem
2018-05-28 15:33 - 2017-02-11 06:11 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12
2018-05-28 15:33 - 2017-02-11 06:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2018-05-28 15:33 - 2017-02-11 05:43 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2018-05-28 15:33 - 2017-02-11 05:26 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2018-05-28 15:33 - 2017-02-11 05:20 - 000000000 ____D C:\Program Files\Intel
2018-05-28 15:33 - 2017-02-11 05:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2018-05-28 15:30 - 2018-01-20 20:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2018-05-28 15:30 - 2018-01-20 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2018-05-28 15:30 - 2017-12-14 23:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2018-05-28 15:30 - 2017-02-11 05:29 - 000000000 ____D C:\Program Files\Realtek
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-05-28 15:27 - 2018-04-12 17:51 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Provisioning
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-05-28 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\system32\winrm
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\system32\WCN
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\system32\slmgr
2018-05-28 15:24 - 2018-04-12 17:50 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Defender
2018-05-28 15:24 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-05-28 15:24 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\servicing
2018-05-28 15:22 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-05-28 15:22 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-05-28 15:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-05-28 14:41 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration
2018-05-28 14:41 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\windows nt
2018-05-28 14:41 - 2018-01-20 16:34 - 000000000 ___RD C:\Users\breta\3D Objects
2018-05-28 14:41 - 2017-02-11 05:07 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-05-28 14:40 - 2018-01-20 14:14 - 001027720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000460520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000381552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000205976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000196640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000159120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000111360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000085968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-05-28 14:40 - 2018-01-20 14:14 - 000046968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-05-28 14:40 - 2018-01-12 17:43 - 000234560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-05-28 14:39 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-05-28 14:39 - 2018-01-20 14:39 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-05-28 14:39 - 2017-02-11 05:26 - 001689050 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2018-05-28 14:36 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-05-28 14:36 - 2018-03-21 15:02 - 000000000 ____D C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2018-05-28 14:36 - 2018-02-26 12:11 - 000000000 ____D C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-28 14:36 - 2018-01-21 18:46 - 000000000 ____D C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2018-05-28 14:36 - 2018-01-20 16:40 - 000000000 ____D C:\Users\breta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sync
2018-05-28 14:36 - 2018-01-20 14:36 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2018-05-28 14:35 - 2017-02-11 05:56 - 000000000 ____D C:\Program Files\Elantech
2018-05-28 14:35 - 2017-02-11 05:30 - 001805173 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2018-05-28 14:35 - 2017-02-11 05:30 - 000000000 ____D C:\ProgramData\rtkSSTSetting
2018-05-28 14:34 - 2017-02-11 05:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-05-28 14:34 - 2017-02-11 05:30 - 000000000 ____D C:\WINDOWS\system32\DAX2
2018-05-28 14:34 - 2017-02-11 05:29 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-05-27 08:17 - 2018-02-11 21:40 - 000001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2018-05-26 09:27 - 2018-02-19 17:30 - 000002032 _____ C:\Users\Public\Desktop\TunnelBear.lnk
2018-05-26 09:27 - 2017-02-11 05:28 - 000000000 ____D C:\ProgramData\Package Cache
2018-05-26 09:25 - 2018-02-19 17:30 - 000000000 ____D C:\Users\breta\AppData\Roaming\TunnelBear
2018-05-18 11:16 - 2017-12-14 19:42 - 000000000 ____D C:\Users\breta\AppData\LocalLow\Mozilla
2018-05-18 11:01 - 2017-02-11 06:08 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-05-18 11:01 - 2017-02-11 06:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-18 11:01 - 2017-02-11 06:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-05-17 12:24 - 2018-01-21 19:19 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-15 23:53 - 2016-09-14 00:23 - 000031000 _____ (Acer Incorporated) C:\WINDOWS\system32\Drivers\LMDriver.sys
2018-05-15 23:53 - 2016-09-14 00:23 - 000025368 _____ (Acer Incorporated) C:\WINDOWS\system32\Drivers\RadioShim.sys

==================== Files in the root of some directories =======

2018-06-13 17:09 - 2018-06-13 17:09 - 000029696 _____ () C:\Users\breta\AppData\Local\MSGBOX.EXE
2018-01-20 12:48 - 2018-01-20 12:48 - 000000017 _____ () C:\Users\breta\AppData\Local\resmon.resmoncfg
2018-01-20 16:39 - 2018-01-20 16:39 - 013583872 _____ () C:\Users\breta\AppData\Local\Sync-1516459179.msi
2018-01-20 16:39 - 2018-01-20 16:40 - 000150898 _____ () C:\Users\breta\AppData\Local\Sync-1516459179.msi.log

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-28 14:33

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(11.92 KiB) Staženo 58 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#8 Příspěvek od Rudy »

To je ono. Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [] => [X]
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b0187-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b01d2-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
SearchScopes: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001 -> DefaultScope {A9E6B20B-3626-4F6D-9E89-81AAFF5D2D43} URL =
C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604}
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {029CC67B-10B6-4D36-9FB9-848A3A55979F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15] (Google Inc.)
Task: {1FBB5921-6279-4084-B382-C1FBE8068A48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15] (Google Inc.)
Task: {D8B63AF2-C957-4264-A6D6-90B839D5D98B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Re: Problém s NTB - programy padají

#9 Příspěvek od breta21 »

Fix result of Farbar Recovery Scan Tool (x64) Version: 06.06.2018 01
Ran by breta (14-06-2018 09:16:54) Run:1
Running from C:\Users\breta\Desktop
Loaded Profiles: breta (Available Profiles: defaultuser0 & breta)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [] => [X]
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b0187-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\MountPoints2: {5b1b01d2-6af6-11e8-bffe-3ca067641216} - "E:\Autorun.exe"
SearchScopes: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001 -> DefaultScope {A9E6B20B-3626-4F6D-9E89-81AAFF5D2D43} URL =
C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604}
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {029CC67B-10B6-4D36-9FB9-848A3A55979F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15] (Google Inc.)
Task: {1FBB5921-6279-4084-B382-C1FBE8068A48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-15] (Google Inc.)
Task: {D8B63AF2-C957-4264-A6D6-90B839D5D98B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b1b0187-6af6-11e8-bffe-3ca067641216}" => removed successfully
HKLM\Software\Classes\CLSID\{5b1b0187-6af6-11e8-bffe-3ca067641216} => not found
"HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b1b01d2-6af6-11e8-bffe-3ca067641216}" => removed successfully
HKLM\Software\Classes\CLSID\{5b1b01d2-6af6-11e8-bffe-3ca067641216} => not found
"HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604} => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{029CC67B-10B6-4D36-9FB9-848A3A55979F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{029CC67B-10B6-4D36-9FB9-848A3A55979F}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1FBB5921-6279-4084-B382-C1FBE8068A48}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1FBB5921-6279-4084-B382-C1FBE8068A48}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8B63AF2-C957-4264-A6D6-90B839D5D98B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8B63AF2-C957-4264-A6D6-90B839D5D98B}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found

=========== EmptyTemp: ==========

BITS transfer queue => 9199616 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 23386063 B
Java, Flash, Steam htmlcache => 1021 B
Windows/system/drivers => 202668937 B
Edge => 1492475 B
Chrome => 877306202 B
Firefox => 353058842 B
Opera => 378718417 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 4512 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
defaultuser0 => 0 B
breta => 77573586 B

RecycleBin => 308138040 B
EmptyTemp: => 2.1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 09:17:38 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#10 Příspěvek od Rudy »

OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
breta21
Návštěvník
Návštěvník
Příspěvky: 183
Registrován: 31 srp 2009 14:37

Re: Problém s NTB - programy padají

#11 Příspěvek od breta21 »

Vypadá to OK, děkuji :)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB - programy padají

#12 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“