Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vytížení procesoru při nečinosti

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Vytížení procesoru při nečinosti

#1 Příspěvek od pang »

Dobrý den, poslední týdny se můj procesor vytěžuje téměř na maximum i když zrovna s počítačem nic nedělám. Poslední dny jde už o kompletní záseky. Navíc jsem vypozroval, že se čas od času objeví v procesech Windows mallware security či něco podobného a začne vytěžovat kompletní internetové připojení. Prosím vás o prověření logu, RSIT který přikládám níže. FRST logy v příloze

Děkuji již předem za pomoc

RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Pang at 2020-03-29 13:14:38
Microsoft Windows 10 Pro
System drive C: has 25 GB (11%) free of 237 GB
Total RAM: 8139 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:14:43, on 29.03.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Pang.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Pang\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Gaijin.Net Agent] "C:\Users\Pang\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\SteamOffline\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Unified Remote V3] "C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: SteelSeries Engine 3.lnk = C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: bdredline - Bitdefender - C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_2da6e - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Graphics Command Center Service (igccservice) - Unknown owner - C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_0bd6f202a4756604\OneApp.IGCC.WinService.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_33f5ee0bec51165d\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Online Connect - Intel Corporation - C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
O23 - Service: Intel(R) Online Connect Helper - Intel Corporation - C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe
O23 - Service: Intel(R) Online Connect Software Asset Manager - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe
O23 - Service: Intel(R) Online Connect Access Legacy CS Loader (Intel(R) TechnologyAccessLegacyCSLoader) - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
O23 - Service: Intel(R) Online Connect Access (Intel(R) TechnologyAccessService) - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: ProductAgentService - Bitdefender - C:\Program Files\Bitdefender Agent\ProductAgentService.exe
O23 - Service: Rockstar Game Library Service (Rockstar Service) - Rockstar Games - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @oem82.inf,%RstMwService.Name%;Intel(R) Storage Middleware Service (RstMwService) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: Bitdefender Update Service (updatesrv) - Bitdefender - C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: Bitdefender Security Service (vsserv) - Bitdefender - C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
O23 - Service: Bitdefender Correlation Service (vsservppl) - Bitdefender - C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13865 bytes

======Listing Processes======









C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM
winlogon.exe
"fontdrvhost.exe"
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes

C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
"ctfmon.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s IKEEXT
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_0bd6f202a4756604\OneApp.IGCC.WinService.exe
"C:\Program Files\Bitdefender Antivirus Free\bdredline.exe"
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHDCPSvc.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe"
"C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe"
"C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc
"C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe"
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
C:\WINDOWS\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
"C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe" /service
"C:\Program Files\Bitdefender Antivirus Free\vsserv.exe" /service


C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
"C:\Program Files\Bitdefender Agent\DiscoverySrv.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20022.81.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
"C:\Program Files\Bitdefender Antivirus Free\bdagent.exe" -minimized
"C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe" -dataPath="C:\ProgramData\SteelSeries\SteelSeries Engine 3" -dbEnv=production -auto=true
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Windows\System32\Taskmgr.exe"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20022.81.0_x64__8wekyb3d8bbwe\YourPhoneServer/YourPhoneServer.exe" -Embedding
"C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc


"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvc
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Windows\explorer.exe" /LOADSAVEDWINDOWS
"C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
"C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe" -f %ProgramData%\DisplaySessionContainer%d.log -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session -c
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
"C:\Program Files (x86)\totalcmd\TOTALCMD64.EXE"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Pang\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Pang\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=80.0.3987.149 --initial-client-data=0x90,0x94,0x98,0x8c,0x9c,0x7ffed180ed18,0x7ffed180ed28,0x7ffed180ed38
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=9464 --on-initialized-event-handle=604 --parent-handle=608 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1636 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --lang=cs --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1872 /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --extension-process --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2704 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --extension-process --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2788 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --extension-process --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2804 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --lang=cs --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=7408 --ignored=" --type=renderer " /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8564 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2864 /prefetch:1

C:\WINDOWS\system32\AUDIODG.EXE 0x7fc
"D:\DOWNLOAD\FRST64.exe"
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
notepad "D:\DOWNLOAD\FRST.txt"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2446991580-1127670474-1602386914-100111_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2446991580-1127670474-1602386914-100111 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 776 788 8192 784
"C:\WINDOWS\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe" -ServerName:App.AppXagta193n5rpf7mheremt3yyfa1g555vc.mca
notepad "D:\DOWNLOAD\Addition.txt"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,7169580612873514014,17170143191289270113,131072 --disable-gpu-compositing --lang=cs --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1208 /prefetch:1
"D:\DOWNLOAD\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Pang\AppData\Roaming\Mozilla\Firefox\Profiles\adc1mw8j.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.161.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.161.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-02-22 474688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-02-22 188992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\WINDOWS\system32\SecurityHealthSystray.exe [2020-02-14 84992]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2019-05-16 9270560]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Pang\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2020-03-22 1579368]
"Gaijin.Net Agent"=C:\Users\Pang\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2017-06-28 2010056]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2015-01-27 1310088]
"Steam"=C:\Program Files (x86)\SteamOffline\steam.exe [2020-03-27 3370272]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"Unified Remote V3"=C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe [2017-12-13 3187384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2016-10-20 136992]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-12-19 587288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SteelSeries Engine 3.lnk - C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\amsdk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

======File associations======

.inf - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.ini - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.scr - open -
.scr - install -
.scr - config -
.txt - open - "C:\WINDOWS\system32\NOTEPAD.EXE" %1

======List of files/folders created in the last 1 month======

2020-03-29 13:14:38 ----D---- C:\rsit
2020-03-29 13:14:38 ----D---- C:\Program Files\trend micro
2020-03-29 13:09:51 ----D---- C:\FRST
2020-03-29 11:30:04 ----D---- C:\WINDOWS\LastGood
2020-03-29 11:29:06 ----A---- C:\WINDOWS\system32\drivers\nvhdap64.dll
2020-03-29 11:27:39 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2020-03-29 11:27:39 ----A---- C:\WINDOWS\system32\OpenCL.dll
2020-03-29 11:27:33 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2020-03-29 11:27:33 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-03-29 11:27:27 ----A---- C:\WINDOWS\SYSWOW64\nvofapi.dll
2020-03-29 11:27:27 ----A---- C:\WINDOWS\system32\nvofapi64.dll
2020-03-29 11:27:26 ----A---- C:\WINDOWS\system32\nvml.dll
2020-03-29 11:27:26 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\nvidia-smi.exe
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-03-29 11:27:25 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-03-29 11:27:24 ----A---- C:\WINDOWS\system32\nvdebugdump.exe
2020-03-29 11:27:22 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2020-03-29 11:27:22 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2020-03-29 11:27:21 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2020-03-29 11:27:21 ----A---- C:\WINDOWS\system32\nvcuda.dll
2020-03-29 11:27:18 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2020-03-29 11:27:18 ----A---- C:\WINDOWS\system32\MCU.exe
2020-03-28 16:24:09 ----D---- C:\ProgramData\dbg
2020-03-28 16:18:43 ----D---- C:\WINDOWS\Minidump
2020-03-20 23:03:44 ----D---- C:\ProgramData\Blizzard Entertainment
2020-03-20 20:53:30 ----A---- C:\WINDOWS\system32\drivers\HWiNFO64A.SYS
2020-03-20 20:53:11 ----D---- C:\ProgramData\FPSMonitor
2020-03-20 19:58:39 ----D---- C:\Users\Pang\AppData\Roaming\ProcessLasso
2020-03-20 17:47:23 ----D---- C:\Users\Pang\AppData\Roaming\NVIDIA
2020-03-20 17:09:53 ----D---- C:\Program Files\Realtek
2020-03-20 17:09:21 ----A---- C:\WINDOWS\system32\YamahaAE3.dll
2020-03-20 17:09:21 ----A---- C:\WINDOWS\system32\YamahaAE2.dll
2020-03-20 17:09:21 ----A---- C:\WINDOWS\system32\YamahaAE.dll
2020-03-20 17:09:21 ----A---- C:\WINDOWS\system32\tossaemaxapo64.dll
2020-03-20 17:09:21 ----A---- C:\WINDOWS\system32\tossaeapo64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\SYSWOW64\SRCOM.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\toseaeapo64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\tosasfapo64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\tosade.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\tepeqapo64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\tadefxapo264.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\tadefxapo.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRRPTR64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRCOM64.dll
2020-03-20 17:09:20 ----A---- C:\WINDOWS\system32\SRCOM.dll
2020-03-20 17:09:19 ----A---- C:\WINDOWS\system32\SRAPO64.dll
2020-03-20 17:09:19 ----A---- C:\WINDOWS\system32\sltech64.dll
2020-03-20 17:09:19 ----A---- C:\WINDOWS\system32\slprp64.dll
2020-03-20 17:09:19 ----A---- C:\WINDOWS\system32\slcnt64.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\sl3apo64.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2020-03-20 17:09:18 ----A---- C:\WINDOWS\system32\SEHDRA64.dll
2020-03-20 17:09:15 ----A---- C:\WINDOWS\system32\SEHDHF64.dll
2020-03-20 17:09:14 ----A---- C:\WINDOWS\SYSWOW64\SEHDHF32.dll
2020-03-20 17:09:12 ----A---- C:\WINDOWS\system32\SECOMN64.dll
2020-03-20 17:09:11 ----A---- C:\WINDOWS\SYSWOW64\SECOMN32.dll
2020-03-20 17:09:11 ----A---- C:\WINDOWS\system32\SEAPO64.dll
2020-03-20 17:09:11 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2020-03-20 17:09:11 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2020-03-20 17:09:11 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2020-03-20 17:09:10 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2020-03-20 17:09:09 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2020-03-20 17:09:09 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2020-03-20 17:09:09 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2020-03-20 17:09:09 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2020-03-20 17:09:08 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2020-03-20 17:09:07 ----A---- C:\WINDOWS\SYSWOW64\RltkAPO.dll
2020-03-20 17:09:07 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2020-03-20 17:09:07 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2020-03-20 17:09:07 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2020-03-20 17:09:05 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2020-03-20 17:09:05 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2020-03-20 17:09:04 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2020-03-20 17:09:04 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2020-03-20 17:09:04 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2020-03-20 17:09:04 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2020-03-20 17:09:04 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\ICEsoundAPO64.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMUI.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMLimiter.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMHVS.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMEQ_Voice.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMEQ.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMClariFi.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HMAPO.dll
2020-03-20 17:09:03 ----A---- C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2020-03-20 17:09:02 ----A---- C:\WINDOWS\system32\HiFiDAX2API.dll
2020-03-20 17:09:00 ----A---- C:\WINDOWS\system32\HarmanAudioInterface.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2020-03-20 17:08:59 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyAPOvlldpgm.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DolbyAPOv251gm.dll
2020-03-20 17:08:58 ----A---- C:\WINDOWS\system32\DDPP64AF3.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPO64AF3.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPD64AF3.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPA64F3.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DDPA64.dll
2020-03-20 17:08:57 ----A---- C:\WINDOWS\system32\DAX3APOv251.dll
2020-03-20 17:08:56 ----A---- C:\WINDOWS\system32\DAX3APOProp.dll
2020-03-20 17:08:56 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2020-03-20 17:08:55 ----A---- C:\WINDOWS\system32\AudysseyEfx.dll
2020-03-20 17:08:55 ----A---- C:\WINDOWS\system32\audioLibVc.dll
2020-03-20 17:08:55 ----A---- C:\WINDOWS\system32\ATKWMI.dll
2020-03-20 17:08:55 ----A---- C:\WINDOWS\system32\AcpiServiceVnA64.dll
2020-03-20 17:08:47 ----A---- C:\WINDOWS\RtlExUpd.dll
2020-03-20 17:00:40 ----D---- C:\WINDOWS\LastGood.Tmp
2020-03-20 17:00:39 ----D---- C:\WINDOWS\system32\drivers\NVIDIA Corporation
2020-03-20 16:58:55 ----A---- C:\WINDOWS\system32\drivers\SETF081.tmp
2020-03-20 16:58:55 ----A---- C:\WINDOWS\system32\drivers\nvhda64v.sys
2020-03-20 16:57:24 ----A---- C:\WINDOWS\system32\nvcpl.dll
2020-03-20 16:56:52 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2020-03-20 16:56:51 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2020-03-20 16:56:50 ----A---- C:\WINDOWS\system32\SETCB51.tmp
2020-03-20 16:56:50 ----A---- C:\WINDOWS\system32\nvapi64.dll
2020-03-20 16:25:33 ----D---- C:\Program Files (x86)\Secunia
2020-03-20 16:15:51 ----D---- C:\AdwCleaner
2020-03-20 15:56:56 ----D---- C:\Program Files\Emsisoft Anti-Malware
2020-03-20 14:34:31 ----A---- C:\WINDOWS\system32\RstMwEventLogMsg.dll
2020-03-20 14:34:31 ----A---- C:\WINDOWS\system32\drivers\iaStorAC.sys
2020-03-20 14:34:13 ----A---- C:\WINDOWS\system32\drivers\sshid.sys
2020-03-20 14:33:26 ----A---- C:\WINDOWS\system32\drivers\Smb_driver_Intel.sys
2020-03-20 14:28:03 ----D---- C:\ProgramData\ProductData
2020-03-20 14:27:02 ----A---- C:\WINDOWS\SYSWOW64\drivers\HWiNFO64A.SYS
2020-03-20 14:26:58 ----D---- C:\Program Files (x86)\IObit
2020-03-20 14:26:44 ----D---- C:\ProgramData\IObit
2020-03-20 14:26:38 ----D---- C:\Users\Pang\AppData\Roaming\IObit
2020-03-19 23:29:54 ----D---- C:\Users\Pang\AppData\Roaming\Easeware
2020-03-19 18:25:16 ----A---- C:\WINDOWS\system32\drivers\bdelam.sys
2020-03-19 18:25:02 ----A---- C:\WINDOWS\system32\drivers\trufos.sys
2020-03-19 18:25:00 ----D---- C:\ProgramData\Bitdefender
2020-03-19 18:24:59 ----A---- C:\WINDOWS\system32\drivers\gzflt.sys
2020-03-19 18:24:57 ----A---- C:\WINDOWS\system32\drivers\edrsensor.sys
2020-03-19 18:24:47 ----A---- C:\WINDOWS\system32\drivers\atc.sys
2020-03-19 18:24:43 ----A---- C:\WINDOWS\system32\drivers\bddci.sys
2020-03-19 18:24:42 ----A---- C:\WINDOWS\system32\drivers\gemma.sys
2020-03-19 18:21:57 ----D---- C:\Program Files\Bitdefender Antivirus Free
2020-03-19 18:13:25 ----D---- C:\ProgramData\Bitdefender Agent
2020-03-19 18:13:25 ----D---- C:\Program Files\Bitdefender Agent
2020-03-18 17:01:20 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2020-03-13 21:41:11 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2020-03-13 21:41:11 ----A---- C:\WINDOWS\system32\wmp.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\MSFlacEncoder.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2020-03-13 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2020-03-13 21:41:07 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2020-03-13 21:41:07 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2020-03-13 21:41:07 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2020-03-13 21:41:07 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2020-03-13 21:41:06 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\winmde.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\MSFlacEncoder.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\mfplat.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-03-13 21:41:04 ----A---- C:\WINDOWS\system32\HologramWorld.dll
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\mfsvr.dll
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\mfcore.dll
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\drivers\csc.sys
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\ddpchunk.dll
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\cscsvc.dll
2020-03-13 21:41:03 ----A---- C:\WINDOWS\system32\CscMig.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\odbc32.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\msimsg.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\iemigplugin.dll
2020-03-13 21:41:02 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2020-03-13 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2020-03-13 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2020-03-13 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2020-03-13 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2020-03-13 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2020-03-13 21:41:00 ----A---- C:\WINDOWS\SYSWOW64\IndexedDbLegacy.dll
2020-03-13 21:41:00 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2020-03-13 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2020-03-13 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2020-03-13 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2020-03-13 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2020-03-13 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2020-03-13 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2020-03-13 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2020-03-13 21:40:57 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\systemreset.exe
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\ResetEngOnline.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\ResetEngine.exe
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\reseteng.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\rdpudd.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\rdpnano.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\rdpcore.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\msimsg.dll
2020-03-13 21:40:56 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2020-03-13 21:40:54 ----A---- C:\WINDOWS\system32\msi.dll
2020-03-13 21:40:53 ----A---- C:\WINDOWS\system32\odbc32.dll
2020-03-13 21:40:53 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2020-03-13 21:40:53 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2020-03-13 21:40:53 ----A---- C:\WINDOWS\system32\ieframe.dll
2020-03-13 21:40:52 ----A---- C:\WINDOWS\system32\jscript9.dll
2020-03-13 21:40:52 ----A---- C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-03-13 21:40:52 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2020-03-13 21:40:52 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2020-03-13 21:40:52 ----A---- C:\WINDOWS\system32\Chakra.dll
2020-03-13 21:40:50 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2020-03-13 21:40:50 ----A---- C:\WINDOWS\system32\mshtml.dll
2020-03-13 21:40:50 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\wsecedit.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\werconcpl.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\edgehtml.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\computecore.dll
2020-03-13 21:40:48 ----A---- C:\WINDOWS\system32\ClipUp.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\SYSWOW64\rtmmvrortc.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\SYSWOW64\ortcengine.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\upnphost.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\upnpcont.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\udhisapi.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\tcbloader.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\hvix64.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\hvax64.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\dusmtask.exe
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2020-03-13 21:40:45 ----A---- C:\WINDOWS\system32\dusmapi.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\scecli.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\rtm.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\iprtprio.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\drivers\afunix.sys
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2020-03-13 21:40:44 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\msauserext.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2020-03-13 21:40:43 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2020-03-13 21:40:41 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2020-03-13 21:40:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2020-03-13 21:40:41 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2020-03-13 21:40:41 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\windowsperformancerecordercontrol.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\omadmapi.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\msimg32.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\enterpriseresourcemanager.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\DMAlertListener.ProxyStub.dll
2020-03-13 21:40:40 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\LaunchTM.exe
2020-03-13 21:40:39 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\directml.dll
2020-03-13 21:40:38 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\rdpsharercom.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\GraphicsCapture.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2020-03-13 21:40:37 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WsmRes.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\wsmplpxy.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WSManMigrationPlugin.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\sxstrace.exe
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\sxs.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\sppcomapi.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeManagerObj.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeHelper.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\dot3msm.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\dot3api.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\DeviceReactivation.dll
2020-03-13 21:40:36 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\TpmCertResources.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\profapi.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\vpnike.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\vbscript.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\scecli.dll
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2020-03-13 21:40:35 ----A---- C:\WINDOWS\system32\comdlg32.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\rtm.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\pnpclean.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\notepad.exe
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\nlasvc.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\nlaapi.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\ncsi.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\mprdim.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\iprtprio.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\drivers\afunix.sys
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\DeviceUpdateAgent.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\system32\asycfilt.dll
2020-03-13 21:40:34 ----A---- C:\WINDOWS\notepad.exe
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\npmproxy.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\nlmsprep.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\nlmproxy.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\netprofm.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\MUILanguageCleanup.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\msauserext.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\lpremove.exe
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\lpksetup.exe
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\edgeIso.dll
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\AxInstUI.exe
2020-03-13 21:40:32 ----A---- C:\WINDOWS\system32\AxInstSv.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\wininet.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\urlmon.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\msIso.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\MdmDiagnostics.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\jsproxy.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\iertutil.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\gdi32full.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-03-13 21:40:31 ----A---- C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\omadmclient.exe
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\omadmapi.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2020-03-13 21:40:30 ----A---- C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\SecurityHealthHost.exe
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2020-03-13 21:40:24 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2020-03-13 21:40:23 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\winlogon.exe
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\msimg32.dll
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\mf3216.dll
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2020-03-13 21:40:23 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2020-03-13 21:40:22 ----A---- C:\WINDOWS\system32\sechost.dll
2020-03-13 21:40:22 ----A---- C:\WINDOWS\system32\profapi.dll
2020-03-13 21:40:22 ----A---- C:\WINDOWS\system32\KernelBase.dll
2020-03-13 21:40:22 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2020-03-13 21:40:22 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\wermgr.exe
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\weretw.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\wer.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\utcutil.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\ntdll.dll
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2020-03-13 21:40:21 ----A---- C:\WINDOWS\system32\diagtrack.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\WinTypes.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\winhttp.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\wincorlib.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\profsvc.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\pacjsworker.exe
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\oleaut32.dll
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2020-03-13 21:40:20 ----A---- C:\WINDOWS\system32\combase.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\twinui.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sxstrace.exe
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sxs.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sppwinob.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sppsvc.exe
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sppobjs.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\slui.exe
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\msctf.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2020-03-13 21:40:19 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2020-03-13 21:40:18 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2020-03-13 21:40:18 ----A---- C:\WINDOWS\system32\rtmpal.dll
2020-03-13 21:40:18 ----A---- C:\WINDOWS\system32\rtmmvrortc.dll
2020-03-13 21:40:18 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2020-03-13 21:40:18 ----A---- C:\WINDOWS\system32\ortcengine.dll
2020-03-13 21:40:17 ----A---- C:\WINDOWS\system32\uDWM.dll
2020-03-13 21:40:17 ----A---- C:\WINDOWS\system32\shell32.dll
2020-03-13 21:40:17 ----A---- C:\WINDOWS\system32\OpenWith.exe
2020-03-13 21:40:17 ----A---- C:\WINDOWS\system32\dwmcore.dll
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\winresume.exe
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\winload.exe
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\uReFS.dll
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\refsutil.exe
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\ole32.dll
2020-03-13 21:40:16 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2020-03-13 21:40:15 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2020-03-13 21:40:13 ----A---- C:\WINDOWS\system32\tier2punctuations.dll
2020-03-13 21:40:13 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2020-03-13 21:40:13 ----A---- C:\WINDOWS\system32\SRH.dll
2020-03-13 21:40:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-03-13 21:40:13 ----A---- C:\WINDOWS\system32\LaunchTM.exe
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\usosvc.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\usocoreworker.exe
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2020-03-13 21:40:11 ----A---- C:\WINDOWS\system32\MusNotification.exe
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\wpnservice.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\wpnprv.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\wpncore.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\win32u.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\win32kfull.sys
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\win32k.sys
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\wci.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\user32.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\profext.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\daxexec.dll
2020-03-13 21:40:10 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-03-13 21:40:09 ----A---- C:\WINDOWS\system32\windows.storage.dll
2020-03-13 21:40:09 ----A---- C:\WINDOWS\system32\rdpsharercom.dll
2020-03-13 21:40:09 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2020-03-13 21:40:09 ----A---- C:\WINDOWS\system32\InstallService.dll
2020-03-13 21:40:09 ----A---- C:\WINDOWS\system32\esent.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\tquery.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\InputService.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2020-03-13 21:40:08 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\mssvp.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\mssrch.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\mssprxy.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\mssph.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\mssitlb.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\msscntrs.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\GraphicsCapture.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\FntCache.dll
2020-03-13 21:40:07 ----A---- C:\WINDOWS\system32\dxgi.dll
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\win32kbase.sys
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\cdd.dll
2020-03-13 21:40:06 ----A---- C:\WINDOWS\system32\bisrv.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\wlidprov.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\qmgr.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\MSAProfileNotificationHandler.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\directml.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\CustomInstallExec.exe
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\appinfo.dll
2020-03-13 21:40:05 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WsmRes.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\wsmplpxy.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WSManMigrationPlugin.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\wlrmdr.exe
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\vdsbas.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\pkeyhelper.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\mpnotify.exe
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-03-13 21:40:04 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2020-03-13 21:40:03 ----A---- C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-03-13 21:40:03 ----A---- C:\WINDOWS\system32\dot3svc.dll
2020-03-13 21:40:03 ----A---- C:\WINDOWS\system32\dot3msm.dll
2020-03-13 21:40:03 ----A---- C:\WINDOWS\system32\dot3api.dll
2020-03-13 21:40:03 ----A---- C:\WINDOWS\explorer.exe
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\wifitask.exe
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\TpmCertResources.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\tbs.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provops.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provhandlers.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provengine.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\provdatastore.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\netman.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\drivers\tbs.sys
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-03-13 21:40:01 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\wwansvc.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\Windows.Management.Service.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\win32spl.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\TetheringMgr.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\provtool.exe
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\localspl.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\DTUHandler.exe
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\drivers\winnat.sys
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\drivers\KNetPwrDepBroker.sys
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\drivers\Acx01000.sys
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\autopilotdiag.dll
2020-03-13 21:40:00 ----A---- C:\WINDOWS\system32\autopilot.dll
2020-03-13 21:39:59 ----A---- C:\WINDOWS\system32\mssecuser.dll
2020-03-13 21:39:59 ----A---- C:\WINDOWS\system32\drivers\mssecflt.sys
2020-03-13 21:39:58 ----A---- C:\WINDOWS\system32\tellib.dll
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\vmbuspipe.dll
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\pciide.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\intelide.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\BthMini.SYS
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\ataport.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\atapi.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\amdppm.sys
2020-03-13 21:39:52 ----A---- C:\WINDOWS\system32\drivers\amdk8.sys
2020-03-13 21:39:51 ----A---- C:\WINDOWS\system32\drivers\monitor.sys
2020-03-13 21:39:51 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2020-03-13 21:29:46 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2020-03-13 21:29:46 ----A---- C:\WINDOWS\system32\poqexec.exe
2020-03-10 17:47:17 ----A---- C:\ProgramData\ntuser.dat
2020-03-10 17:30:09 ----D---- C:\Users\Pang\AppData\Roaming\Valve Corporation
2020-03-10 17:19:35 ----D---- C:\ProgramData\Rockstar Games
2020-03-08 01:35:56 ----D---- C:\Users\Pang\AppData\Roaming\SmartSteamEmu
2020-03-07 19:19:37 ----D---- C:\Program Files (x86)\SteamOffline
2020-03-05 17:23:14 ----D---- C:\ProgramData\Path of Building
2020-03-05 17:23:14 ----D---- C:\Program Files (x86)\Path of Building
2020-03-04 18:52:57 ----D---- C:\Users\Pang\AppData\Roaming\BrawlhallaAir

======List of files/folders modified in the last 1 month======

2020-03-29 13:14:42 ----D---- C:\WINDOWS\Temp
2020-03-29 13:14:38 ----RD---- C:\Program Files
2020-03-29 13:14:37 ----D---- C:\WINDOWS\Prefetch
2020-03-29 13:10:34 ----SHD---- C:\System Volume Information
2020-03-29 13:06:07 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2020-03-29 12:56:01 ----D---- C:\WINDOWS\system32\sru
2020-03-29 11:31:19 ----D---- C:\WINDOWS\System32
2020-03-29 11:31:19 ----D---- C:\WINDOWS\INF
2020-03-29 11:31:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2020-03-29 11:30:14 ----D---- C:\WINDOWS\system32\drivers
2020-03-29 11:30:13 ----D---- C:\WINDOWS\system32\DriverStore
2020-03-29 11:30:10 ----HD---- C:\ProgramData
2020-03-29 11:30:10 ----DC---- C:\Intel
2020-03-29 11:30:06 ----D---- C:\WINDOWS\SysWOW64
2020-03-29 11:30:04 ----D---- C:\Windows
2020-03-29 11:22:35 ----D---- C:\Program Files (x86)\Autodesk
2020-03-29 11:22:35 ----AD---- C:\ProgramData\Autodesk
2020-03-29 11:20:56 ----SHDC---- C:\WINDOWS\Installer
2020-03-29 11:20:55 ----D---- C:\Program Files\Autodesk
2020-03-29 11:20:55 ----AD---- C:\Program Files\Common Files\Autodesk Shared
2020-03-29 11:20:48 ----DC---- C:\Users\Pang\AppData\Roaming\Autodesk
2020-03-29 11:18:45 ----D---- C:\Program Files\Common Files
2020-03-29 11:18:36 ----RD---- C:\WINDOWS\Microsoft.NET
2020-03-29 11:18:33 ----RSD---- C:\WINDOWS\Fonts
2020-03-29 11:18:33 ----RD---- C:\WINDOWS\assembly
2020-03-29 11:18:28 ----SD---- C:\WINDOWS\Downloaded Program Files
2020-03-29 11:12:41 ----D---- C:\WINDOWS\system32\SleepStudy
2020-03-29 00:06:53 ----D---- C:\WINDOWS\LiveKernelReports
2020-03-28 19:17:32 ----D---- C:\WINDOWS\system32\Tasks
2020-03-28 19:16:55 ----D---- C:\Program Files (x86)\MSI Afterburner
2020-03-28 19:16:00 ----RD---- C:\Program Files (x86)
2020-03-28 19:12:44 ----HD---- C:\WINDOWS\ELAMBKUP
2020-03-28 16:18:50 ----D---- C:\WINDOWS\system32\catroot2
2020-03-28 16:18:44 ----D---- C:\WINDOWS\system32\LogFiles
2020-03-28 10:57:39 ----D---- C:\Program Files (x86)\Rockstar Games
2020-03-28 10:57:32 ----D---- C:\Program Files\Rockstar Games
2020-03-28 10:14:06 ----HD---- C:\Program Files\WindowsApps
2020-03-28 10:14:06 ----D---- C:\WINDOWS\AppReadiness
2020-03-26 21:20:43 ----D---- C:\WINDOWS\system32\config
2020-03-24 21:07:15 ----D---- C:\WINDOWS\WinSxS
2020-03-22 13:41:26 ----D---- C:\Program Files (x86)\Steam
2020-03-22 01:33:08 ----DC---- C:\Users\Pang\AppData\Roaming\uTorrent
2020-03-22 00:06:19 ----DC---- C:\Users\Pang\AppData\Roaming\Telegram Desktop
2020-03-20 17:44:45 ----HD---- C:\Program Files (x86)\Temp
2020-03-20 17:10:00 ----D---- C:\WINDOWS\system32\DAX3
2020-03-20 17:10:00 ----D---- C:\WINDOWS\system32\DAX2
2020-03-20 17:10:00 ----D---- C:\ProgramData\Audyssey Labs
2020-03-20 17:08:53 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2020-03-20 17:06:28 ----D---- C:\WINDOWS\system32\RTCOM
2020-03-20 17:00:51 ----D---- C:\ProgramData\NVIDIA Corporation
2020-03-20 14:36:19 ----D---- C:\ProgramData\Package Cache
2020-03-20 14:36:11 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2020-03-20 14:36:10 ----D---- C:\Program Files (x86)\OpenAL
2020-03-20 14:36:10 ----A---- C:\WINDOWS\SYSWOW64\wrap_oal.dll
2020-03-20 14:36:10 ----A---- C:\WINDOWS\SYSWOW64\OpenAL32.dll
2020-03-20 14:36:10 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2020-03-20 14:35:37 ----D---- C:\WINDOWS\system32\CatRoot
2020-03-20 14:27:02 ----D---- C:\WINDOWS\SYSWOW64\drivers
2020-03-19 20:48:13 ----D---- C:\WINDOWS\CbsTemp
2020-03-19 18:42:18 ----D---- C:\Program Files\Malwarebytes
2020-03-19 18:40:59 ----D---- C:\Program Files\Mini KMS Activator Ultimate 2.0
2020-03-19 18:22:21 ----D---- C:\temp
2020-03-19 18:21:56 ----DC---- C:\WINDOWS\Panther
2020-03-19 18:21:55 ----D---- C:\WINDOWS\debug
2020-03-19 18:19:01 ----DC---- C:\Users\Pang\AppData\Roaming\Guitar Pro 6
2020-03-19 18:18:46 ----D---- C:\Users\Pang\AppData\Roaming\Blitz
2020-03-19 17:42:14 ----D---- C:\ProgramData\Unified Remote
2020-03-19 11:23:56 ----D---- C:\Hry
2020-03-18 16:55:18 ----D---- C:\Program Files (x86)\RivaTuner Statistics Server
2020-03-14 22:45:56 ----AD---- C:\KMPlayer
2020-03-14 01:30:10 ----D---- C:\Program Files\Common Files\AV
2020-03-14 01:29:29 ----D---- C:\WINDOWS\SYSWOW64\setup
2020-03-14 01:29:29 ----D---- C:\WINDOWS\SYSWOW64\migration
2020-03-14 01:29:29 ----D---- C:\WINDOWS\SYSWOW64\Dism
2020-03-14 01:29:29 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2020-03-14 01:29:29 ----D---- C:\WINDOWS\SystemResources
2020-03-14 01:29:28 ----SD---- C:\WINDOWS\system32\DiagSvcs
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\wbem
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\setup
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\oobe
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\migration
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\en-US
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\Dism
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\cs-CZ
2020-03-14 01:29:28 ----D---- C:\WINDOWS\system32\Boot
2020-03-14 01:29:27 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2020-03-14 01:29:27 ----D---- C:\WINDOWS\ShellExperiences
2020-03-14 01:29:27 ----D---- C:\WINDOWS\servicing
2020-03-14 01:29:27 ----D---- C:\WINDOWS\bcastdvr
2020-03-14 01:29:27 ----D---- C:\WINDOWS\apppatch
2020-03-14 01:29:27 ----D---- C:\Program Files\Windows Defender Advanced Threat Protection
2020-03-14 01:29:27 ----D---- C:\Program Files\Windows Defender
2020-03-14 01:29:24 ----D---- C:\WINDOWS\system32\drivers\UMDF
2020-03-13 21:49:25 ----D---- C:\WINDOWS\system32\MRT
2020-03-13 21:44:44 ----AC---- C:\WINDOWS\system32\MRT.exe
2020-03-13 21:21:44 ----D---- C:\WINDOWS\Logs
2020-03-10 17:47:36 ----D---- C:\Program Files (x86)\Common Files
2020-03-10 17:30:39 ----D---- C:\Program Files (x86)\VulkanRT
2020-03-08 20:37:15 ----D---- C:\Users\Pang\AppData\Roaming\Blitz-helpers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gzflt;gzflt; C:\WINDOWS\system32\drivers\gzflt.sys [2018-11-28 188384]
R0 iaStorAC;@oem82.inf,%iaStorAC.DeviceDesc%;Intel(R) Chipset SATA/PCIe RST Premium Controller; C:\WINDOWS\System32\drivers\iaStorAC.sys [2020-03-20 1035744]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2019-03-19 56632]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2020-03-13 254776]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2020-03-13 40960]
R1 atc;atc; C:\WINDOWS\system32\DRIVERS\atc.sys [2020-02-17 1972328]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2019-03-19 70456]
R1 epp;epp; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [2020-03-20 155112]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2019-03-19 59392]
R1 Gemma;Gemma; C:\WINDOWS\system32\DRIVERS\gemma.sys [2020-02-26 453552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2019-03-19 8704]
R1 HWiNFO;HWiNFO Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [2020-03-20 61208]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2020-03-20 27552]
R1 MpKsl5ced5e5d;MpKsl5ced5e5d; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKsl5ced5e5d.sys [2020-03-28 58120]
R1 MpKsl5dc2d1e8;MpKsl5dc2d1e8; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKsl5dc2d1e8.sys [2020-03-20 58120]
R1 MpKsl74fa13f3;MpKsl74fa13f3; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKsl74fa13f3.sys [2020-03-20 58120]
R1 MpKsl7b82dcb8;MpKsl7b82dcb8; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKsl7b82dcb8.sys [2020-03-29 58120]
R1 MpKslb7f734d2;MpKslb7f734d2; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKslb7f734d2.sys [2020-03-20 58120]
R1 MpKslca5c5620;MpKslca5c5620; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKslca5c5620.sys [2020-03-28 58120]
R1 ndisrd;@oem54.inf,%ndisrfl_Desc%;Intel(R) Technology Access Filter Driver; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [2016-09-13 59792]
R2 BdDci;BdDci Service; C:\WINDOWS\system32\DRIVERS\bddci.sys [2020-03-02 757240]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2020-03-13 457216]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2019-03-19 53760]
R3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2020-02-14 117264]
R3 dtlitescsibus;@oem50.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-01-08 30264]
R3 edrsensor;edrsensor; C:\WINDOWS\system32\DRIVERS\edrsensor.sys [2020-02-03 309120]
R3 iaLPSS2_GPIO2;@oem77.inf,%iaLPSS2_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_skl.inf_amd64_e79b9f98409084db\iaLPSS2_GPIO2.sys [2020-03-20 95632]
R3 iaLPSS2_I2C;@oem79.inf,%iaLPSS2_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_5b7885d62ac7afad\iaLPSS2_I2C.sys [2020-03-20 185232]
R3 iaLPSS2_UART2;@oem78.inf,%iaLPSS2_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_skl.inf_amd64_607c4c430707bc90\iaLPSS2_UART2.sys [2020-03-20 299408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2019-05-16 6849624]
R3 MEIx64;@oem76.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [2020-03-20 266128]
R3 NVHDA;@oem48.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2020-03-18 222112]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\nvlddmkm.sys [2020-03-19 23439288]
R3 rt640x64;@oem83.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2020-03-20 1160280]
S0 bdelam;bdelam; C:\WINDOWS\system32\drivers\bdelam.sys [2019-03-21 22960]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2019-03-19 42808]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2019-03-19 319528]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2019-03-19 885048]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2019-03-19 148520]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2019-03-19 124448]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2019-03-19 128528]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2019-03-19 75280]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2019-03-19 94736]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2019-03-19 58896]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2019-03-19 68624]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2019-03-19 41784]
S1 amsdk;AMSDK Driver; \??\C:\WINDOWS\system32\drivers\amsdk.sys []
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2019-03-19 20992]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\WINDOWS\system32\drivers\Acx01000.sys [2020-03-13 337920]
S3 amdgpio2;@amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\WINDOWS\System32\drivers\amdgpio2.sys [2019-03-19 18432]
S3 amdi2c;@amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\WINDOWS\System32\drivers\amdi2c.sys [2019-03-19 37888]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2019-11-16 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2020-02-14 138040]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2020-02-14 174392]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2020-02-14 153912]
S3 BlueStacksDrv;BlueStacks Hypervisor; \??\C:\Program Files\BlueStacks\BstkDrv.sys [2019-07-06 313112]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\WINDOWS\System32\drivers\BthA2dp.sys [2019-11-12 231936]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2020-03-13 114688]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2019-03-19 97280]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\WINDOWS\System32\drivers\BTHMINI.sys [2020-03-13 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2020-03-13 1428992]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2020-03-13 99328]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2019-03-19 43008]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2019-03-19 64312]
S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-01-08 47672]
S3 dtproscsibus;DAEMON Tools Pro Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [2018-07-01 30264]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys [2019-11-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2019-03-19 53560]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\WINDOWS\System32\drivers\hidspi.sys [2019-11-12 64000]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2020-02-14 84496]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2019-03-19 28672]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2019-03-19 1866768]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2019-03-19 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2019-03-19 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2019-03-19 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-03-19 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-03-19 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-03-19 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2019-03-19 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-03-19 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-03-19 180736]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-03-19 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2019-03-19 566800]
S3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\igdkmd64.sys [2020-01-15 24489112]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2019-03-19 46592]
S3 IntcDAud;@oem2.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\System32\DriverStore\FileRepository\intcdaud.inf_amd64_10f733ce00703a6b\IntcDAud.sys [2020-01-15 341952]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel Power Limit Driver; C:\WINDOWS\System32\drivers\intelpmax.sys [2019-03-19 28672]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2019-03-19 54584]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2019-03-19 535864]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2019-03-19 62264]
S3 MbbCx;MBB Network Adapter Class Extension; C:\WINDOWS\system32\drivers\MbbCx.sys [2019-11-16 359424]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-03-19 64512]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2019-03-19 1150480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2019-03-19 153616]
S3 NDKPing;NDKPing Driver; C:\WINDOWS\system32\drivers\NDKPing.sys [2019-03-19 63488]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2019-03-19 187904]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2019-03-19 158520]
S3 PktMon;Packet Monitor Driver; C:\WINDOWS\system32\drivers\PktMon.sys [2019-03-19 96056]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2019-03-19 127800]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2019-03-19 17408]
S3 portcfg;portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [2019-03-19 25600]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2019-12-11 986936]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2019-03-19 211456]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2019-03-19 113152]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2019-03-19 32568]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 bdredline;bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2019-03-27 2500144]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 CDPUserSvc_2da6e;CDPUserSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHDCPSvc.exe [2020-01-15 516032]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R2 FoxitReaderService;Foxit Reader Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [2017-04-13 1659592]
R2 igccservice;Intel(R) Graphics Command Center Service; C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_0bd6f202a4756604\OneApp.IGCC.WinService.exe [2020-01-15 28096]
R2 Intel(R) TechnologyAccessLegacyCSLoader;Intel(R) Online Connect Access Legacy CS Loader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [2016-10-05 173288]
R2 Intel(R) TechnologyAccessService;Intel(R) Online Connect Access; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [2016-10-05 496872]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-10-20 177440]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-10-20 419616]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NIHardwareService;NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2012-09-05 6364024]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe [2020-03-19 881896]
R2 OneSyncSvc_2da6e;OneSyncSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 ProductAgentService;ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [2019-07-15 1291888]
R2 RstMwService;@oem82.inf,%RstMwService.Name%;Intel(R) Storage Middleware Service; C:\WINDOWS\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe [2020-03-20 2156512]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R3 cbdhsvc_2da6e;cbdhsvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-11-11 43704]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 Intel(R) Online Connect;Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [2016-10-04 25824]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 PimIndexMaintenanceSvc_2da6e;PimIndexMaintenanceSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-28 153752]
S2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_33f5ee0bec51165d\igfxCUIService.exe [2020-01-15 390800]
S2 Intel(R) Online Connect Helper;Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [2016-10-04 22752]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc_2da6e;AarSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService_2da6e;BcastDVRUserService_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2019-05-11 8577760]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService_2da6e;BluetoothUserService_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService_2da6e;CaptureService_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc_2da6e;ConsentUxUserSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHeciSvc.exe [2020-01-15 511152]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 CredentialEnrollmentManagerUserSvc_2da6e;CredentialEnrollmentManagerUserSvc_2da6e; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DeviceAssociationBrokerSvc_2da6e;DeviceAssociationBrokerSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc_2da6e;DevicePickerUserSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc_2da6e;DevicesFlowUserSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2020-03-13 97792]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2019-05-11 777856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\elevation_service.exe [2020-03-16 1113072]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-28 153752]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-07-26 987432]
S3 Intel(R) Online Connect Software Asset Manager;Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2016-09-29 18152]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2015-06-04 58792]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-05-29 177288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService_2da6e;MessagingService_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [2019-03-19 103424]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc_2da6e;PrintWorkflowUserSvc_2da6e; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 Rockstar Service;Rockstar Game Library Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2020-03-28 1314448]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2020-02-14 828216]

-----------------EOF-----------------
Přílohy
FRST_Logy.rar
(28.84 KiB) Staženo 68 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#3 Příspěvek od pang »

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 29.03.20
Čas skenování: 13:24
Logovací soubor: e11c1076-71af-11ea-924e-d8cb8acca2fd.json

-Informace o softwaru-
Verze: 4.1.0.56
Verze komponentů: 1.0.859
Aktualizovat verzi balíku komponent: 1.0.21564
Licence: Zkušební

-Systémová informace-
OS: Windows 10 (Build 18362.720)
CPU: x64
Systém souborů: NTFS
Uživatel: PANGPC\Pang

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 375533
Zjištěné hrozby: 0
Hrozby umístěné do karantény: 0
Uplynulý čas: 1 min, 58 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#4 Příspěvek od pang »

# -------------------------------
# Malwarebytes AdwCleaner 8.0.3.0
# -------------------------------
# Build: 03-03-2020
# Database: 2020-03-23.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 03-29-2020
# Duration: 00:00:27
# OS: Windows 10 Pro
# Scanned: 32067
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [2503 octets] - [20/03/2020 15:16:33]
AdwCleaner[C00].txt - [2489 octets] - [20/03/2020 15:17:45]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#5 Příspěvek od Rudy »

Toto je OK. Teď dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 . RSIT je pro Win 10 nekompatibilní.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#6 Příspěvek od pang »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-03-2020
Ran by Pang (administrator) on PANGPC (MSI MS-7982) (29-03-2020 15:00:30)
Running from D:\DOWNLOAD
Loaded Profiles: Pang & (Available Profiles: defaultuser0 & Pang & anarc)
Platform: Windows 10 Pro Version 1909 18363.720 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Foxit Software Incorporated -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files (x86)\totalcmd\TOTALCMD64.EXE
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Online Connect -> Intel Corporation) C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
(Intel(R) Online Connect Access -> Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
(Intel(R) Online Connect Access -> Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
(Intel(R) pGFX -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_0bd6f202a4756604\OneApp.IGCC.WinService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_91e5ab5ed4687752\IntelCpHDCPSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(NATIVE INSTRUMENTS GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9270560 2019-05-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1203488 2016-10-20] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Run: [Gaijin.Net Agent] => C:\Users\Pang\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2010056 2017-06-28] (Gaijin Entertainment LLP -> Gaijin Entertainment)
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc -> Autodesk, Inc.)
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Run: [Steam] => C:\Program Files (x86)\SteamOffline\steam.exe [3370272 2020-03-27] (Valve -> Valve Corporation)
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Run: [Unified Remote V3] => C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe [3187384 2017-12-13] (Unified Intents AB -> Unified Intents AB)
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Policies\Explorer: []
HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Mamka\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Mamka\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\...\RunOnce: [Uninstall 19.222.1110.0006\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mamka\AppData\Local\Microsoft\OneDrive\19.222.1110.0006\amd64"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\...\RunOnce: [Uninstall 19.222.1110.0006] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mamka\AppData\Local\Microsoft\OneDrive\19.222.1110.0006"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\Installer\chrmstp.exe [2020-03-18] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-01-28]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {023D246B-07B5-456B-BD1F-F3FFEC910B5A} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7-Logon => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {0E18D85D-5FB7-4184-8E78-B0BC5412BF19} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-01-28] (Google Inc -> Google Inc.)
Task: {258BAC7A-4475-441B-86AE-3FEAE1397582} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
Task: {281ADB3E-CFA1-44B5-BCFD-A227014555D1} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {372DEC1E-A7E9-4FD3-ACF7-6E574CEB803C} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [488760 2019-07-15] (Bitdefender SRL -> Bitdefender)
Task: {471D015A-81CA-4EA0-9B89-3F6B0F9DF00C} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {90DA8BCB-7F31-409B-8543-01E1A22BC961} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-01-28] (Google Inc -> Google Inc.)
Task: {9FAA24F5-36AF-4F22-A8E7-202EEA575984} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
Task: {B884968B-8738-4510-8563-C20B104A89A2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CFB4143A-DD4B-48D2-AFF2-974482C7A342} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7 => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel(R) Software Asset Manager -> Intel Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 10.0.0.10
Tcpip\..\Interfaces\{468a02a5-2323-4fba-9bab-33d84b6fde0d}: [DhcpNameServer] 10.0.0.1 10.0.0.10

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-02-22] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-02-22] (Oracle America, Inc. -> Oracle Corporation)

FireFox:
========
FF DefaultProfile: adc1mw8j.default
FF ProfilePath: C:\Users\Pang\AppData\Roaming\Mozilla\Firefox\Profiles\adc1mw8j.default [2020-03-20]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-02-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-02-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default [2020-03-29]
CHR DownloadDir: D:\DOWNLOAD
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Disk Google) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-28]
CHR Extension: (YouTube) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-28]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-02-19]
CHR Extension: (Pro Guitar Tuner) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnemellbcpjiodfgadpoebbjobfaoiga [2017-01-28]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-17]
CHR Extension: (Guitar Chords Chart) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmmjcbokmpooocgkccpdfkcaclcfgdhd [2017-01-28]
CHR Extension: (Excel Online) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-05-07]
CHR Extension: (Morpheon Dark) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafbdhjdkjnoafhfelkjpchpaepjknad [2020-03-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-05]
CHR Extension: (Neater Bookmarks) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofgjggbjanlhbgaemjbkiegeebmccifi [2017-01-28]
CHR Extension: (Gmail) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\Pang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-20]
CHR Profile: C:\Users\Pang\AppData\Local\Google\Chrome\User Data\System Profile [2020-03-19]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2500144 2019-03-27] (Bitdefender SRL -> Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8577760 2019-05-11] (BattlEye Innovations e.K. -> )
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2019-05-11] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2017-04-13] (Foxit Software Incorporated -> Foxit Software Inc.)
R2 igccservice; C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_0bd6f202a4756604\OneApp.IGCC.WinService.exe [28096 2020-01-15] (Intel(R) pGFX -> )
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
U3 Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [25824 2016-10-04] (Intel(R) Online Connect -> Intel Corporation)
S2 Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [22752 2016-10-04] (Intel(R) Online Connect -> Intel Corporation)
S3 Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel(R) Software Asset Manager -> Intel Corporation)
R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-10-05] (Intel(R) Online Connect Access -> Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-10-05] (Intel(R) Online Connect Access -> Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [58792 2015-06-04] (Intel(R) SBA -> Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-20] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-29] (Malwarebytes Inc -> Malwarebytes)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1291888 2019-07-15] (Bitdefender SRL -> Bitdefender)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1314448 2020-03-28] (Rockstar Games, Inc. -> Rockstar Games)
R2 RstMwService; C:\WINDOWS\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe [2156512 2020-03-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5929920 2020-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803952 2017-11-09] (TeamViewer GmbH -> TeamViewer GmbH)
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [242024 2020-01-31] (Bitdefender SRL -> Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [308064 2020-01-31] (Bitdefender SRL -> Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [242024 2020-01-31] (Bitdefender SRL -> Bitdefender)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1972328 2020-02-17] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [757240 2020-03-02] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [313112 2019-07-06] (Bluestack Systems, Inc. -> Bluestack System Inc. )
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtproscsibus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [30264 2018-07-01] (Disc Soft Ltd -> Disc Soft Ltd)
R3 edrsensor; C:\WINDOWS\System32\DRIVERS\edrsensor.sys [309120 2020-02-03] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [155112 2020-03-20] (Microsoft Windows Hardware Compatibility Publisher -> Emsisoft Ltd)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-03-29] (Malwarebytes Corporation -> Malwarebytes)
R1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [453552 2020-02-26] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\drivers\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC)
R1 HWiNFO; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [61208 2020-03-20] (Martin Malik - REALiX -> REALiX(tm))
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-03-20] (Martin Malik - REALiX -> REALiX(tm))
R3 iaLPSS2_GPIO2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_skl.inf_amd64_e79b9f98409084db\iaLPSS2_GPIO2.sys [95632 2020-03-20] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R3 iaLPSS2_I2C; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_5b7885d62ac7afad\iaLPSS2_I2C.sys [185232 2020-03-20] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R3 iaLPSS2_UART2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_skl.inf_amd64_607c4c430707bc90\iaLPSS2_UART2.sys [299408 2020-03-20] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1035744 2020-03-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-03-29] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-03-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [195432 2020-03-29] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73584 2020-03-29] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-03-29] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [119960 2020-03-29] (Malwarebytes Inc -> Malwarebytes)
R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [266128 2020-03-20] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R1 MpKsl13e9fd19; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A0D25183-8B03-4AFD-B4E3-4E937A18B529}\MpKsl13e9fd19.sys [58120 2020-03-29] (Microsoft Corporation -> Microsoft Corporation)
R1 ndisrd; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel(R) Technology Access -> Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\nvlddmkm.sys [23439288 2020-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1160280 2020-03-20] (Realtek Semiconductor Corp. -> Realtek )
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [56840 2020-03-20] (Synaptics Incorporated -> Synaptics Incorporated)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [40568 2015-10-03] (SteelSeries ApS -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [47944 2020-03-20] (SteelSeries ApS -> SteelSeries ApS)
R2 trufos; C:\WINDOWS\System32\drivers\trufos.sys [638368 2020-01-31] (Bitdefender SRL -> Bitdefender)
R3 uvhid; C:\WINDOWS\System32\drivers\uvhid.sys [28128 2017-12-13] (Unified Intents AB -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-29 13:37 - 2020-03-29 13:37 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-03-29 13:37 - 2020-03-29 13:37 - 000195432 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-03-29 13:37 - 2020-03-29 13:37 - 000119960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-03-29 13:37 - 2020-03-29 13:37 - 000073584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-03-29 13:23 - 2020-03-29 13:23 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-03-29 13:23 - 2020-03-29 13:23 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-03-29 13:23 - 2020-03-29 13:23 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-03-29 13:23 - 2020-03-29 13:23 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-03-29 13:23 - 2020-03-29 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-03-29 13:23 - 2020-03-29 13:23 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-03-29 13:14 - 2020-03-29 13:14 - 000000000 ____D C:\rsit
2020-03-29 13:14 - 2020-03-29 13:14 - 000000000 ____D C:\Program Files\trend micro
2020-03-29 13:09 - 2020-03-29 15:00 - 000000000 ____D C:\FRST
2020-03-29 11:30 - 2020-03-29 11:30 - 000000000 ____D C:\WINDOWS\LastGood
2020-03-29 11:29 - 2020-03-18 11:39 - 000039824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-03-29 11:27 - 2020-03-19 04:22 - 004196160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-03-29 11:27 - 2020-03-19 01:26 - 000450464 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-03-29 11:27 - 2020-03-19 01:26 - 000348048 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-03-29 11:27 - 2020-03-19 01:25 - 011944864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-03-29 11:27 - 2020-03-19 01:25 - 010285472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 002073200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 001565136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 001481144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 001351776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 001142384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 001022560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 000817264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 000680048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 000676240 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 000573024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-03-29 11:27 - 2020-03-19 01:24 - 000546928 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-03-29 11:27 - 2020-03-19 01:24 - 000544144 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 017601120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 015157664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 005856864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 005158512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 001049696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 000849848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-03-29 11:27 - 2020-03-19 01:23 - 000811632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 000655472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-03-29 11:27 - 2020-03-19 01:23 - 000445024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-03-29 11:27 - 2020-03-18 11:39 - 000111058 _____ C:\WINDOWS\system32\nvidia-smi.1.pdf
2020-03-29 11:27 - 2020-03-18 11:39 - 000077314 _____ C:\WINDOWS\system32\nvinfo.pb
2020-03-28 16:24 - 2020-03-28 16:24 - 000000000 ____D C:\ProgramData\dbg
2020-03-28 16:18 - 2020-03-28 16:18 - 000000000 ____D C:\WINDOWS\Minidump
2020-03-21 21:51 - 2020-03-21 21:51 - 000001176 _____ C:\Users\Public\Desktop\Path of Building.lnk
2020-03-20 23:03 - 2020-03-20 23:03 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2020-03-20 22:12 - 2020-03-20 22:12 - 000565399 ____C C:\Users\Pang\Documents\FPSMonitorCrashDump.dmp
2020-03-20 20:53 - 2020-03-21 18:04 - 000065490 ____C C:\Users\Pang\Documents\FPSMonitor.txt
2020-03-20 20:53 - 2020-03-20 22:03 - 000000000 ____D C:\ProgramData\FPSMonitor
2020-03-20 20:53 - 2020-03-20 20:53 - 000061208 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO64A.SYS
2020-03-20 19:58 - 2020-03-20 19:59 - 000000000 ____D C:\Users\Pang\AppData\Roaming\ProcessLasso
2020-03-20 17:47 - 2020-03-20 17:47 - 000000000 ____D C:\Users\Pang\AppData\Roaming\NVIDIA
2020-03-20 17:09 - 2020-03-20 17:09 - 000000000 ____D C:\Program Files\Realtek
2020-03-20 17:09 - 2019-05-16 02:24 - 015218728 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE3.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003819936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003445848 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003340512 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003336416 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003306920 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 003168496 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 002198088 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001435248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001397056 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001386896 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001382344 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001353424 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001337768 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001294400 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001181008 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001110280 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001078792 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 001061680 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000965128 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000873568 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000852240 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000692272 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000604904 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000541224 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000467264 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000447288 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000392976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000381512 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000343816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000341256 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000341256 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000327376 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000327376 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000232024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000230808 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000220496 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000218376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000193088 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000175048 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000158800 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000157448 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000116672 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000094008 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000091024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000090280 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000088424 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000083728 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2020-03-20 17:09 - 2019-05-16 02:24 - 000075648 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 072520608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2020-03-20 17:09 - 2019-05-16 02:23 - 007748824 _____ (ICEpower A/S) C:\WINDOWS\system32\ICEsoundAPO64.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 007178360 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 006849624 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2020-03-20 17:09 - 2019-05-16 02:23 - 003676960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2020-03-20 17:09 - 2019-05-16 02:23 - 003159672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 002930048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000453384 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000416400 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000406560 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000378280 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000366224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000360448 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000266440 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000203944 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000179704 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000154256 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000139864 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2020-03-20 17:09 - 2019-05-16 02:23 - 000023584 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2020-03-20 17:09 - 2019-05-16 01:59 - 030727676 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-03-20 17:09 - 2019-05-16 01:59 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2020-03-20 17:08 - 2019-05-16 02:23 - 007101632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 006270080 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 005346888 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 002992080 _____ (Audyssey Labs) C:\WINDOWS\system32\AudysseyEfx.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 002444576 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001971264 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001965048 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001788064 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001610848 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOv251gm.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001598504 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001544144 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001516376 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001372280 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001287496 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOvlldpgm.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001259840 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 001159072 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000751408 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000734904 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000715752 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000511752 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000452840 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000448712 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000367504 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000332904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000315872 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000278168 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000261344 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000261304 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000260320 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000184216 _____ (ASUSTeK COMPUTER INC.) C:\WINDOWS\system32\ATKWMI.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000122208 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000118480 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2020-03-20 17:08 - 2019-05-16 02:23 - 000105200 _____ C:\WINDOWS\system32\audioLibVc.dll
2020-03-20 17:08 - 2019-04-15 21:13 - 002856624 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2020-03-20 17:00 - 2020-03-20 17:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2020-03-20 17:00 - 2020-03-20 17:00 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2020-03-20 16:58 - 2020-03-18 11:39 - 000222112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2020-03-20 16:57 - 2020-03-16 14:41 - 005588896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2020-03-20 16:56 - 2020-03-19 04:22 - 004927048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2020-03-20 16:56 - 2020-03-16 14:41 - 040502176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2020-03-20 16:56 - 2020-03-16 14:41 - 035371424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2020-03-20 16:25 - 2020-03-20 16:25 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-03-20 16:15 - 2020-03-20 16:17 - 000000000 ____D C:\AdwCleaner
2020-03-20 16:13 - 2020-03-28 19:15 - 000192617 _____ C:\WINDOWS\ZAM.krnl.trace
2020-03-20 16:13 - 2020-03-28 19:11 - 000000000 ____D C:\Users\Pang\AppData\Local\AMSDK
2020-03-20 16:13 - 2020-03-20 16:13 - 000000000 ____D C:\Users\Pang\AppData\Local\Zemana
2020-03-20 15:56 - 2020-03-28 19:10 - 000000000 ____D C:\Program Files\Emsisoft Anti-Malware
2020-03-20 15:45 - 2020-03-20 16:07 - 000002952 ____C C:\Users\Pang\Desktop\Rkill.txt
2020-03-20 14:34 - 2020-03-20 14:34 - 001035744 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAC.sys
2020-03-20 14:34 - 2020-03-20 14:34 - 000047944 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2020-03-20 14:34 - 2020-03-20 14:34 - 000026080 _____ C:\WINDOWS\system32\RstMwEventLogMsg.dll
2020-03-20 14:33 - 2020-03-20 14:33 - 000056840 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2020-03-20 14:28 - 2020-03-20 16:27 - 000000000 ____D C:\ProgramData\ProductData
2020-03-20 14:27 - 2020-03-20 14:28 - 000000000 ___DC C:\Users\Pang\AppData\LocalLow\IObit
2020-03-20 14:27 - 2020-03-20 14:27 - 000027552 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2020-03-20 14:26 - 2020-03-20 16:27 - 000000000 ____D C:\Users\Pang\AppData\Roaming\IObit
2020-03-20 14:26 - 2020-03-20 14:29 - 000000000 ____D C:\ProgramData\IObit
2020-03-20 14:26 - 2020-03-20 14:26 - 000000000 ____D C:\Program Files (x86)\IObit
2020-03-19 23:29 - 2020-03-20 14:30 - 000000000 ____D C:\Users\Pang\AppData\Roaming\Easeware
2020-03-19 20:40 - 2020-03-19 20:40 - 000007602 _____ C:\Users\Pang\AppData\Local\Resmon.ResmonCfg
2020-03-19 18:45 - 2020-03-19 18:45 - 000000000 ____D C:\Users\Pang\AppData\Local\cache
2020-03-19 18:37 - 2020-03-19 18:37 - 000075260 _____ C:\ProgramData\agent.update.1584635828.bdinstall.v2.bin
2020-03-19 18:25 - 2020-03-19 18:25 - 000001211 _____ C:\Users\Public\Desktop\Bitdefender Antivirus Free.lnk
2020-03-19 18:25 - 2020-03-19 18:25 - 000001196 ____C C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free.lnk
2020-03-19 18:25 - 2020-03-19 18:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free
2020-03-19 18:25 - 2020-03-19 18:25 - 000000000 ____D C:\ProgramData\Bitdefender
2020-03-19 18:25 - 2020-01-31 17:11 - 000638368 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2020-03-19 18:25 - 2019-03-21 01:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2020-03-19 18:24 - 2020-03-02 13:22 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-03-19 18:24 - 2020-02-26 10:31 - 000453552 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-03-19 18:24 - 2020-02-17 11:43 - 001972328 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-03-19 18:24 - 2020-02-03 16:53 - 000309120 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\edrsensor.sys
2020-03-19 18:24 - 2018-11-28 06:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2020-03-19 18:21 - 2020-03-29 13:40 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2020-03-19 18:15 - 2020-03-19 18:15 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-03-19 18:13 - 2020-03-19 18:37 - 000000000 ____D C:\Program Files\Bitdefender Agent
2020-03-19 18:13 - 2020-03-19 18:13 - 000103320 _____ C:\ProgramData\agent.1584634405.bdinstall.v2.bin
2020-03-19 18:13 - 2020-03-19 18:13 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2020-03-19 00:32 - 2020-03-19 00:32 - 000000000 ___DC C:\Users\Pang\Documents\Call of Duty Modern Warfare
2020-03-18 17:01 - 2020-03-20 17:09 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-03-17 16:31 - 2020-03-19 00:30 - 000000753 _____ C:\Users\Public\Desktop\Call of Duty Modern Warfare.lnk
2020-03-17 16:31 - 2020-03-17 16:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare
2020-03-13 21:41 - 2020-03-13 21:41 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 019812352 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 011607552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 006285312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 004129648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 003819520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 003488768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 003243296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 002956688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 002315680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 002072664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001867816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001770552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001490640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001282944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001108040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000757632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000739328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2020-03-13 21:41 - 2020-03-13 21:41 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddpchunk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-03-13 21:41 - 2020-03-13 21:41 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-03-13 21:40 - 2020-03-13 21:41 - 018027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 007905784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 007755776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 006520776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 006436352 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 006084344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 005112832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004855808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004622280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 004580352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004563416 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004471296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004348408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 004048896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003971808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003799552 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003587896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 003552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003371720 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003260928 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 003143168 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 002875904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002808832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 002773568 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002768440 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-03-13 21:40 - 2020-03-13 21:40 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-03-13 21:40 - 2020-03-13 21:40 - 002740736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002715648 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 002698040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002522112 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002474496 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002307584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002259872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002224952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002087376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002031104 _____ C:\WINDOWS\system32\rdpnano.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 002021888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001999952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001985104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001972536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001823232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001762304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001757304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-03-13 21:40 - 2020-03-13 21:40 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001743888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001665416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001657120 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001484600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001396152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-03-13 21:40 - 2020-03-13 21:40 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001283600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-03-13 21:40 - 2020-03-13 21:40 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001264128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001260480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001218632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001190912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001182448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001088000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001054376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001031680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001007672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000983896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000945384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000935040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000929144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000908504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000892696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000877232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000833616 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000802304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000776488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000769552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000748032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000734720 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000668296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000642216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000637240 _____ C:\WINDOWS\system32\Drivers\storport.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000636848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000627216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000605896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-03-13 21:40 - 2020-03-13 21:40 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000522384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000478792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-03-13 21:40 - 2020-03-13 21:40 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000457016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000429880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-03-13 21:40 - 2020-03-13 21:40 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Acx01000.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000320312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000248064 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000234984 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000221200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000213984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000180232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000165504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000136328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000133944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000120560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000120048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000102760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000098104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000089616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000089568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000066336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000042336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000042296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000029712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys
2020-03-13 21:40 - 2020-03-13 21:40 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe
2020-03-13 21:40 - 2020-03-13 21:40 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-03-13 21:40 - 2020-03-13 21:40 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-03-13 21:39 - 2020-03-13 21:39 - 003977216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-03-13 21:39 - 2020-03-13 21:39 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-03-13 21:39 - 2020-03-13 21:39 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000250896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000224056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000222520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000208696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll
2020-03-13 21:39 - 2020-03-13 21:39 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2020-03-13 21:39 - 2020-03-13 21:39 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000056632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS
2020-03-13 21:39 - 2020-03-13 21:39 - 000030008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2020-03-13 21:39 - 2020-03-13 21:39 - 000019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys
2020-03-13 21:39 - 2020-03-13 21:39 - 000016912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys
2020-03-13 21:29 - 2020-03-13 21:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-03-13 21:29 - 2020-03-13 21:29 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-03-10 18:35 - 2020-03-10 18:35 - 000001065 ____C C:\Users\Pang\Desktop\Rockstar Games Launcher.lnk
2020-03-10 17:30 - 2020-03-10 17:30 - 000000000 ____D C:\Users\Pang\AppData\Roaming\Valve Corporation
2020-03-10 17:19 - 2020-03-10 18:35 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2020-03-10 17:19 - 2020-03-10 18:33 - 000000000 ____D C:\ProgramData\Rockstar Games
2020-03-10 17:19 - 2020-03-10 17:31 - 000000000 ___DC C:\Users\Pang\Documents\Rockstar Games
2020-03-08 01:35 - 2020-03-08 01:35 - 000000000 ____D C:\Users\Pang\AppData\Roaming\SmartSteamEmu
2020-03-07 19:48 - 2020-03-07 19:48 - 000000230 ____C C:\Users\Pang\Desktop\Red Dead Redemption 2.url
2020-03-07 19:35 - 2020-03-10 18:12 - 000001512 ____C C:\Users\Pang\Desktop\OFFLINE.lnk
2020-03-07 19:19 - 2020-03-28 18:31 - 000000000 ____D C:\Program Files (x86)\SteamOffline
2020-03-07 00:02 - 2020-03-09 12:38 - 000014253 _____ C:\ProgramData\DisplaySessionContainer24.log_backup1
2020-03-05 19:41 - 2020-03-07 00:02 - 000013147 _____ C:\ProgramData\DisplaySessionContainer23.log_backup1
2020-03-05 17:24 - 2020-03-05 17:29 - 000000000 ___DC C:\Users\Pang\Documents\Path of Building
2020-03-05 17:23 - 2020-03-21 21:51 - 000000000 ____D C:\ProgramData\Path of Building
2020-03-05 17:23 - 2020-03-21 21:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Path of Building
2020-03-05 17:23 - 2020-03-21 21:51 - 000000000 ____D C:\Program Files (x86)\Path of Building
2020-03-05 00:08 - 2020-03-05 19:41 - 000013507 _____ C:\ProgramData\DisplaySessionContainer22.log_backup1
2020-03-04 18:57 - 2020-03-04 19:26 - 000000000 ____D C:\Users\Pang\BrawlhallaReplays
2020-03-04 18:52 - 2020-03-04 18:53 - 000000000 ____D C:\Users\Pang\AppData\Roaming\BrawlhallaAir
2020-03-02 22:11 - 2020-03-02 22:11 - 000005162 ____C C:\Users\Pang\Documents\Hideout.hideout
2020-03-02 18:34 - 2020-03-05 00:08 - 000013820 _____ C:\ProgramData\DisplaySessionContainer21.log_backup1
2020-03-02 18:33 - 2020-03-03 23:42 - 000014183 _____ C:\ProgramData\DisplaySessionContainer19.log_backup1
2020-03-02 18:33 - 2020-03-02 18:33 - 000000000 ____D C:\Users\Mamka\AppData\Local\D3DSCache
2020-03-02 18:32 - 2020-03-02 23:44 - 000011777 _____ C:\ProgramData\DisplaySessionContainer18.log_backup1
2020-03-02 13:23 - 2020-03-02 13:49 - 000013501 _____ C:\ProgramData\DisplaySessionContainer16.log_backup1

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-29 14:57 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-03-29 14:57 - 2018-05-22 15:21 - 000000000 ___DC C:\Users\Pang\AppData\Local\D3DSCache
2020-03-29 13:52 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-03-29 13:43 - 2019-11-11 17:55 - 001693640 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-03-29 13:43 - 2019-03-19 13:57 - 000716944 _____ C:\WINDOWS\system32\perfh005.dat
2020-03-29 13:43 - 2019-03-19 13:57 - 000145024 _____ C:\WINDOWS\system32\perfc005.dat
2020-03-29 13:37 - 2019-11-11 17:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-03-29 13:37 - 2019-11-11 17:47 - 000471104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-03-29 13:37 - 2017-01-28 14:19 - 000000000 ___DC C:\Intel
2020-03-29 13:36 - 2020-01-28 20:26 - 000011633 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-03-29 13:36 - 2020-01-28 20:18 - 000018400 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-03-29 13:36 - 2020-01-28 20:18 - 000012188 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-03-29 13:36 - 2019-03-19 06:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-03-29 13:34 - 2020-01-28 20:18 - 000001206 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-03-29 13:23 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-03-29 13:23 - 2019-03-19 06:37 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2020-03-29 13:06 - 2017-06-01 16:25 - 000000000 ___DC C:\Users\Pang\AppData\Local\Battle.net
2020-03-29 11:30 - 2018-01-15 18:01 - 000000000 ___DC C:\Users\Pang\AppData\Local\NVIDIA
2020-03-29 11:22 - 2017-04-28 15:10 - 000000000 ____D C:\Program Files (x86)\Autodesk
2020-03-29 11:22 - 2017-04-28 15:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2020-03-29 11:22 - 2017-04-28 15:04 - 000000000 ____D C:\ProgramData\Autodesk
2020-03-29 11:20 - 2017-04-28 15:07 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2020-03-29 11:20 - 2017-04-28 15:07 - 000000000 ____D C:\Program Files\Autodesk
2020-03-29 11:20 - 2017-04-28 15:04 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Autodesk
2020-03-29 11:18 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-03-29 11:12 - 2019-11-11 17:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-03-29 00:06 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-03-28 19:17 - 2017-10-22 11:52 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-03-28 19:17 - 2017-10-22 11:52 - 000000000 ___DC C:\Users\Pang\AppData\Local\Discord
2020-03-28 19:16 - 2017-01-28 15:03 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2020-03-28 16:18 - 2018-11-08 22:19 - 001025834 ____N C:\WINDOWS\Minidump\032820-10734-01.dmp
2020-03-28 10:57 - 2017-01-29 15:48 - 000000000 ____D C:\Program Files\Rockstar Games
2020-03-28 10:57 - 2017-01-29 15:48 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2020-03-28 10:14 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-03-28 10:14 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-03-26 23:17 - 2020-02-02 22:24 - 000013142 _____ C:\ProgramData\DisplaySessionContainer6.log_backup1
2020-03-25 02:43 - 2020-01-31 19:25 - 000013575 _____ C:\ProgramData\DisplaySessionContainer5.log_backup1
2020-03-23 00:36 - 2020-01-30 16:04 - 000013529 _____ C:\ProgramData\DisplaySessionContainer4.log_backup1
2020-03-22 22:06 - 2019-11-11 17:54 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2446991580-1127670474-1602386914-1001
2020-03-22 22:06 - 2019-11-11 17:49 - 000002362 ____C C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-22 22:05 - 2017-01-28 14:07 - 000000000 ___RD C:\Users\Pang\OneDrive
2020-03-22 13:41 - 2017-07-02 16:32 - 000000000 ____D C:\Program Files (x86)\Steam
2020-03-22 01:33 - 2018-09-06 21:38 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\uTorrent
2020-03-22 00:06 - 2017-01-29 15:30 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Telegram Desktop
2020-03-21 00:19 - 2019-11-11 17:54 - 000003474 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-21 00:19 - 2019-11-11 17:54 - 000003350 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-20 21:24 - 2020-01-28 20:18 - 000011408 _____ C:\ProgramData\DisplaySessionContainer2.log_backup1
2020-03-20 17:44 - 2017-01-28 14:21 - 000000000 ___HD C:\Program Files (x86)\Temp
2020-03-20 17:10 - 2017-01-28 14:22 - 000000000 ____D C:\WINDOWS\system32\DAX3
2020-03-20 17:10 - 2017-01-28 14:22 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-03-20 17:10 - 2017-01-28 14:22 - 000000000 ____D C:\ProgramData\Audyssey Labs
2020-03-20 17:08 - 2017-01-28 14:21 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-03-20 17:06 - 2017-01-28 14:22 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2020-03-20 17:00 - 2017-01-28 14:15 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-03-20 14:36 - 2020-01-05 13:18 - 000466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2020-03-20 14:36 - 2020-01-05 13:18 - 000444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2020-03-20 14:36 - 2020-01-05 13:18 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2020-03-20 14:36 - 2020-01-05 13:18 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2020-03-20 14:36 - 2020-01-05 13:18 - 000000000 ____D C:\Program Files (x86)\OpenAL
2020-03-20 14:36 - 2017-01-28 14:18 - 000000000 ____D C:\ProgramData\Package Cache
2020-03-20 14:34 - 2017-01-28 14:21 - 001160280 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2020-03-19 20:59 - 2017-01-28 14:15 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-19 20:48 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-03-19 18:42 - 2018-09-05 20:37 - 000000000 ____D C:\Program Files\Malwarebytes
2020-03-19 18:40 - 2020-02-04 22:32 - 000000000 ____D C:\Program Files\Mini KMS Activator Ultimate 2.0
2020-03-19 18:22 - 2017-10-04 09:22 - 000000000 ____D C:\temp
2020-03-19 18:21 - 2019-11-11 16:44 - 000000000 ___DC C:\WINDOWS\Panther
2020-03-19 18:21 - 2017-01-29 15:40 - 000000000 ___DC C:\Users\Pang\AppData\Local\CrashDumps
2020-03-19 18:19 - 2018-01-08 15:03 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Guitar Pro 6
2020-03-19 18:18 - 2019-12-30 14:56 - 000000000 ____D C:\Users\Pang\AppData\Roaming\Blitz
2020-03-19 18:18 - 2019-12-30 14:55 - 000000000 ____D C:\Users\Pang\AppData\Local\Blitz
2020-03-19 18:18 - 2019-08-24 20:01 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blitz Inc
2020-03-19 18:18 - 2017-12-28 15:22 - 000000000 ___DC C:\Users\Pang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2020-03-19 17:42 - 2018-10-10 21:27 - 000000000 ____D C:\ProgramData\Unified Remote
2020-03-19 12:45 - 2020-01-29 19:38 - 000012538 _____ C:\ProgramData\DisplaySessionContainer3.log_backup1
2020-03-19 11:23 - 2017-01-28 14:39 - 000000000 ____D C:\Hry
2020-03-18 16:55 - 2017-01-28 15:04 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2020-03-18 16:24 - 2019-11-11 17:49 - 000000000 ____D C:\Users\Pang
2020-03-14 22:45 - 2017-04-18 11:38 - 000000000 ____D C:\KMPlayer
2020-03-14 01:30 - 2019-08-21 18:11 - 000000000 ____D C:\Program Files\Common Files\AV
2020-03-14 01:30 - 2018-02-23 23:49 - 000000000 ___RD C:\Users\Pang\3D Objects
2020-03-14 01:30 - 2017-01-28 14:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-03-14 01:29 - 2019-03-19 13:59 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\setup
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-03-14 01:29 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-03-14 01:29 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\servicing
2020-03-13 21:49 - 2018-02-22 20:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-03-13 21:44 - 2018-02-22 20:38 - 121542864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-03-10 18:37 - 2017-01-29 15:39 - 000000000 ___DC C:\Users\Pang\AppData\Local\Rockstar Games
2020-03-10 17:30 - 2019-10-23 19:53 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2020-03-08 20:37 - 2019-12-30 14:56 - 000000000 ____D C:\Users\Pang\AppData\Roaming\Blitz-helpers
2020-03-08 16:57 - 2017-02-19 19:17 - 000000000 ____D C:\Users\Pang\Downloads\Telegram Desktop
2020-03-02 13:23 - 2020-02-10 23:17 - 000012142 _____ C:\ProgramData\DisplaySessionContainer15.log_backup1
2020-03-02 13:23 - 2020-02-10 01:34 - 000013521 _____ C:\ProgramData\DisplaySessionContainer14.log_backup1
2020-03-02 00:38 - 2020-02-08 23:46 - 000012766 _____ C:\ProgramData\DisplaySessionContainer13.log_backup1
2020-02-29 14:51 - 2020-02-08 06:21 - 000010214 _____ C:\ProgramData\DisplaySessionContainer12.log_backup1
2020-02-29 02:31 - 2020-02-05 00:30 - 000007872 _____ C:\ProgramData\DisplaySessionContainer11.log_backup1

==================== Files in the root of some directories ========

2018-01-18 16:18 - 2018-01-18 16:18 - 000000132 ____C () C:\Users\Pang\AppData\Roaming\Adobe PNG Format CS6 Prefs
2020-01-05 13:15 - 2013-07-22 02:59 - 000012005 _____ () C:\Users\Pang\AppData\Roaming\alsoft.ini
2019-03-28 12:25 - 2019-03-28 12:25 - 000100620 ____C () C:\Users\Pang\AppData\Roaming\Sekiro.rar
2020-01-03 16:31 - 2020-01-03 16:31 - 000000045 _____ () C:\Users\Pang\AppData\Roaming\~SiMPLEX.ini
2020-03-19 20:40 - 2020-03-19 20:40 - 000007602 _____ () C:\Users\Pang\AppData\Local\Resmon.ResmonCfg
2017-05-09 12:52 - 2017-05-09 12:52 - 000000000 ____C () C:\Users\Pang\AppData\Local\Temptable.xml

==================== FCheck ================================

(If an entry is included in the fixlist, the file/folder will be moved.)

FCheck: C:\WINDOWS\wmshr.exe [2018-01-28] <==== ATTENTION (zero byte File/Folder)

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#7 Příspěvek od pang »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-03-2020
Ran by Pang (29-03-2020 15:02:16)
Running from D:\DOWNLOAD
Windows 10 Pro Version 1909 18363.720 (X64) (2019-11-11 15:55:13)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2446991580-1127670474-1602386914-500 - Administrator - Disabled)
anarc (S-1-5-21-2446991580-1127670474-1602386914-1004 - Limited - Enabled) => C:\Users\anarc
DefaultAccount (S-1-5-21-2446991580-1127670474-1602386914-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2446991580-1127670474-1602386914-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-2446991580-1127670474-1602386914-501 - Limited - Disabled)
Pang (S-1-5-21-2446991580-1127670474-1602386914-1001 - Administrator - Enabled) => C:\Users\Pang
WDAGUtilityAccount (S-1-5-21-2446991580-1127670474-1602386914-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {67773CDD-EA83-AD98-A2ED-386463EB3B0D}
AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Kaspersky Free (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

A360 Desktop (HKLM\...\{B209E611-5511-4AD6-B4B3-9D36F93DBCD4}) (Version: 6.0.3.1100 - Autodesk)
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.15 - Autodesk)
Autodesk App Manager 2016 (HKLM-x32\...\{4ECF9E00-2978-46AF-BD80-455EFEAB7A93}) (Version: 2.0.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.4 (HKLM-x32\...\{4E20873D-BC20-495C-AFD9-B18877B7F9BB}) (Version: 1.2.4.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit (HKLM\...\{4BEE127E-95C4-434D-ABAC-65155192BB24}) (Version: 4.35.1742 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.15 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.15 - Autodesk)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.16.157 - Bitdefender)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.110.0.1081 - BlueStack Systems, Inc.)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.3.0.14878 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Import souborů SketchUp 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1036 - Intel Corporation)
Intel(R) Online Connect Software Asset Manager (HKLM-x32\...\{AE956AB9-CD98-4F1E-8B9E-C3C66E290D64}) (Version: 3.4.2072 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7755 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 3.1.53.8739 - Intel(R) Corporation)
Intel(R) Update Manager (HKLM-x32\...\{89E5F369-612A-4A5E-8BF2-7938C76ABF29}) (Version: 3.0.135 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
KeyDominator2 (HKLM-x32\...\BloodyKeyboard) (Version: 18.10.0005 - Bloody)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.5.8 - PandoraTV)
League of Legends (HKLM-x32\...\{4D78B137-434D-466E-A4D8-98E7EA3F73E5}) (Version: 4.2.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mini KMS Activator Ultimate 2.0 (HKLM\...\Mini KMS Activator Ultimate 1.9_is1) (Version: 2.0 - )
Mozilla Firefox 51.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 cs)) (Version: 51.0.1 - Mozilla)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: - Native Instruments)
Native Instruments Guitar Rig Mobile I/O (HKLM-x32\...\Native Instruments Guitar Rig Mobile I/O) (Version: - Native Instruments)
Native Instruments Guitar Rig Session I/O (HKLM-x32\...\Native Instruments Guitar Rig Session I/O) (Version: - Native Instruments)
Native Instruments Rig Kontrol 3 (HKLM-x32\...\Native Instruments Rig Kontrol 3) (Version: - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: - Native Instruments)
NVIDIA Ovladač HD audia 1.3.38.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.26 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 445.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 445.75 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Path of Building version 1.4.163 (HKLM-x32\...\{72FA9AB7-189F-4BDE-8856-72DEB90C157B}_is1) (Version: 1.4.163 - Openarl)
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22899 - Microsoft Corporation)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 5.0.1.312 - Jan Fiala)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8703.1 - Realtek Semiconductor Corp.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.18.217 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.5.2 - Rockstar Games)
Speciální aplikace Autodesk 2016 (HKLM-x32\...\{D42F37CD-9AF9-4435-A474-B387C5BB6B47}) (Version: 2.0.0 - Autodesk)
Stardew Valley Editor (HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\fd112501192d78a2) (Version: 1.0.0.71 - SDV Modders)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries Engine 3.7.4 (HKLM\...\SteelSeries Engine 3) (Version: 3.7.4 - SteelSeries ApS)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.3 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.88438 - TeamViewer)
Telegram Desktop version 1.9.21 (HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.9.21 - Telegram FZ-LLC)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Unified Remote (HKLM-x32\...\{415B4714-4F8C-49C6-B310-881EAF892CFB}_is1) (Version: 3.6.1 - Unified Intents AB)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 6.01 - NCH Software)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
WPTx64 (HKLM-x32\...\{0B2C58EB-67A2-225B-60B2-D1990E55DD33}) (Version: 8.100.26866 - Microsoft)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220 [2020-02-02] (Dolby Laboratories)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2020-02-19] (INTEL CORP)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-14] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-01-28] (NVIDIA Corp.)
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2727.0_x64__8j3eq9eme6ctt [2020-03-14] (INTEL CORP) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2016\en-US\acadficn.dll => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2017-03-31] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-03-29] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\nvshext.dll [2020-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2017-03-31] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-03-29] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2446991580-1127670474-1602386914-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Pang\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm

==================== Loaded Modules (Whitelisted) =============

2016-05-13 00:00 - 2016-05-13 00:00 - 002146304 _____ (Holtek Semiconductor Inc.) [File not signed] C:\Program Files\SteelSeries\SteelSeries Engine 3\HIDDLL.dll
2016-05-13 00:00 - 2016-05-13 00:00 - 000358400 _____ (Holtek) [File not signed] C:\Program Files\SteelSeries\SteelSeries Engine 3\ISPDLL.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\Software\Classes\.scr: AutoCADScriptFile =>

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;;
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2446991580-1127670474-1602386914-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 10.0.0.1 - 10.0.0.10
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is disabled.

Network Binding:
=============
Ethernet: Intel(R) Technology Access Filter Driver -> nt_ndisrd (enabled)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS 2015 Rychlé spuštění.lnk"
HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS Nástroj pro stahování na pozadí.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "emsisoft anti-malware"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "Gaijin.Net Agent"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "World of Tanks"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "World of Warships"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "Autodesk Sync"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "Unified Remote V3"
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CF3C9690-00C2-4E5C-A497-BAEC6F51259A}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\secure_desktop_capture.exe No File
FirewallRules: [{F05F3FDB-DDF8-44D0-91E0-9617A4334792}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steam_monitor.exe No File
FirewallRules: [{1860D48A-9CC0-4F4D-BE35-369C9A65D27D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steamservice.exe No File
FirewallRules: [{0E4846DC-C3BB-4705-9BFA-8B788BD1B230}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x64launcher.exe No File
FirewallRules: [{AD3F52ED-A4E0-41E5-8248-3C9B5D4F435D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x86launcher.exe No File
FirewallRules: [{DB09AC30-BC0C-4B73-B7C4-774A26D74EF7}] => (Block) %ProgramFiles% (x86)\SteamOffline\Steam.exe No File
FirewallRules: [{1295BE83-306F-40D9-975B-7387A983C8EE}] => (Block) %ProgramFiles% (x86)\SteamOffline\GameOverlayUI.exe No File
FirewallRules: [{AB6B9F61-6967-472D-83A8-C26DDA9EC53D}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter.exe No File
FirewallRules: [{626C4DFE-BA94-4F73-95C9-5ADF45CB8DB5}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter64.exe No File
FirewallRules: [{35314E1E-E29E-4F71-BCE4-13F8E2734ACB}] => (Block) %ProgramFiles% (x86)\SteamOffline\streaming_client.exe No File
FirewallRules: [{E99D04FB-B761-46EC-96E7-29700FE2622D}] => (Block) %ProgramFiles% (x86)\SteamOffline\uninstall.exe No File
FirewallRules: [TCP Query User{E2376A74-0C5C-4C94-840E-3BE1A8A4CCCD}C:\program files (x86)\unified remote 3\remoteserverwin.exe] => (Allow) C:\program files (x86)\unified remote 3\remoteserverwin.exe (Unified Intents AB -> Unified Intents AB)
FirewallRules: [UDP Query User{C6C5F4FB-3B7C-41F1-A75C-AA91D6DF0CE9}C:\program files (x86)\unified remote 3\remoteserverwin.exe] => (Allow) C:\program files (x86)\unified remote 3\remoteserverwin.exe (Unified Intents AB -> Unified Intents AB)
FirewallRules: [{FF4EA6B3-7C02-470D-AB80-7DC3B7BD4218}] => (Allow) C:\Program Files (x86)\SteamOffline\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{E2AC3EFD-3C06-4700-B54A-CA695C462596}] => (Allow) C:\Program Files (x86)\SteamOffline\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{07DEB099-A883-40FE-87D6-4FB8969F1973}] => (Allow) C:\Program Files (x86)\SteamOffline\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C19D48C7-808C-410C-ABB6-826990947B3B}] => (Allow) C:\Program Files (x86)\SteamOffline\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{E7D27F85-CAAE-4F6B-8D80-23094FA92602}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{E98417D7-180B-44A3-B4EB-86EB574D77B4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{EFBF6AF1-AA91-4FE1-A27A-E3FE3EA93457}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{F693AE66-9678-4E13-B482-9222FA4629DE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1A8AF85F-AC39-4E85-88D9-42EE4897449A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{65E5C1A7-E621-4347-A595-A02998C6C899}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{32696A78-CBF8-4F8C-AECD-2769A8ECA76B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

18-03-2020 16:54:15 Odstraněno Realtek High Definition Audio Driver
19-03-2020 18:19:22 Removed Kaspersky Password Manager
20-03-2020 14:31:40 Driver Booster : Standardní řadič SATA AHCI
28-03-2020 13:46:45 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Myš Microsoft PS/2
Description: Myš Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (03/29/2020 03:02:41 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5444,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (03/29/2020 01:45:31 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4300,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (03/29/2020 01:45:30 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (03/29/2020 01:45:25 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (03/29/2020 01:45:20 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (03/29/2020 01:45:15 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (03/29/2020 01:45:10 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (03/29/2020 01:45:05 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu na SECURITY_PRODUCT_STATE_ON došlo k chybě.


System errors:
=============
Error: (03/29/2020 01:36:56 PM) (Source: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv) (EventID: 10) (User: NT AUTHORITY)
Description: A TCG Command has returned an error.
Desc: AuthenticateSession
Param1: 0x1
Param2: 0x60000001c
Param3: 0x900000006
Param4: 0x0
Status: 0x12

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Intel(R) Online Connect Access Legacy CS Loader byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ProductAgentService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Foxit Reader Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Intel(R) Online Connect byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Storage Middleware Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Content Protection HDCP Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/29/2020 01:34:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NIHardwareService byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2020-03-20 21:24:05.155
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {3D58E0B7-8AA7-430F-9B43-BB4D0BAB3AAC}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-03-20 21:00:24.740
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {567E70B3-EBDD-40E7-8063-1893DF110B8C}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-03-19 18:46:03.916
Description:
Antivirová ochrana v programu Windows Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Keygen
ID: 2147593794
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_D:\Instalace\Programy - Instalace\AutoCAD_2008_64Bit\Crack\AutoCAD-2008-keygen.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Systém
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.265.251.0, AS: 1.265.251.0, NIS: 1.265.251.0
Verze modulu: AM: 1.1.14700.5, NIS: 1.1.14700.5

Date: 2020-03-19 18:16:07.460
Description:
Antivirová ochrana v programu Windows Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Sonoko.A!ms
ID: 2147724631
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_D:\hry\Zalohovane\Nioh Complete Edition\nioh.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
Verze bezpečnostních informací: AV: 1.265.251.0, AS: 1.265.251.0, NIS: 1.265.251.0
Verze modulu: AM: 1.1.14700.5, NIS: 1.1.14700.5

Date: 2020-03-19 18:10:10.247
Description:
Antivirová ochrana v programu Windows Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Keygen
ID: 2147593794
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Windows\Temp\tmp00000299\tmp00048142
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
Verze bezpečnostních informací: AV: 1.265.251.0, AS: 1.265.251.0, NIS: 1.265.251.0
Verze modulu: AM: 1.1.14700.5, NIS: 1.1.14700.5

Date: 2020-03-29 13:49:21.717
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.265.251.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14700.5
Kód chyby: 0x80070645
Popis chyby: Tato akce je platná pouze u produktů, které jsou momentálně nainstalovány.

Date: 2020-03-29 13:49:21.716
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.265.251.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14700.5
Kód chyby: 0x80070645
Popis chyby: Tato akce je platná pouze u produktů, které jsou momentálně nainstalovány.

Date: 2020-03-29 13:49:21.716
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.265.251.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14700.5
Kód chyby: 0x80070645
Popis chyby: Tato akce je platná pouze u produktů, které jsou momentálně nainstalovány.

Date: 2020-03-29 13:38:49.420
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.265.251.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14700.5
Kód chyby: 0x80070645
Popis chyby: Tato akce je platná pouze u produktů, které jsou momentálně nainstalovány.

Date: 2020-03-29 13:38:49.419
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.265.251.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14700.5
Kód chyby: 0x80070645
Popis chyby: Tato akce je platná pouze u produktů, které jsou momentálně nainstalovány.

CodeIntegrity:
===================================

Date: 2020-03-29 13:57:29.329
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bitdefender Antivirus Free\bdamsi\264409176091320000\antimalware_provider64.dll that did not meet the Windows signing level requirements.

Date: 2020-03-29 13:57:29.312
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bitdefender Antivirus Free\bdamsi\264409176091320000\antimalware_provider64.dll that did not meet the Windows signing level requirements.

Date: 2020-03-29 13:40:08.794
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bitdefender Antivirus Free\bdamsi\264409176091320000\antimalware_provider64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-29 13:40:08.778
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bitdefender Antivirus Free\bdamsi\264409176091320000\antimalware_provider64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-29 13:39:08.328
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bitdefender Antivirus Free\bdamsi\264409176091320000\antimalware_provider64.dll that did not meet the Windows signing level requirements.

Date: 2020-03-29 13:26:14.423
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Autodesk\Autodesk Sync\AdSyncNamespace.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-03-29 13:26:14.406
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Autodesk\Autodesk Sync\AdSyncNamespace.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-03-29 13:26:14.373
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Autodesk\Autodesk Sync\AdSyncNamespace.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 3.D0 11/03/2016
Motherboard: MSI B150M PRO-VDH (MS-7982)
Processor: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Percentage of memory in use: 52%
Total physical RAM: 8138.91 MB
Available physical RAM: 3905.75 MB
Total Virtual: 20138.91 MB
Available Virtual: 14125.71 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.83 GB) (Free:24.22 GB) NTFS
Drive d: () (Fixed) (Total:833.86 GB) (Free:38.32 GB) NTFS
Drive e: (Zaloha) (Fixed) (Total:97.66 GB) (Free:97.48 GB) NTFS

\\?\Volume{630018cc-aedf-4b93-9d61-6b62952faaba}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{d5bada88-f79f-4735-9541-3d7a58c46d9e}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{37c67da4-fb49-462b-810d-e12e25c049e9}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 4ABCF46A)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 1DEC873E)
Partition 1: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#8 Příspěvek od Rudy »

Neprva bych chtěl podotknout, že máte v systému celkem 4 zapnuté antiviry. 3 z nich odinstalujte a ponechte si jeden. Takto dochází k softwarovým konfliktům.

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2016\en-US\acadficn.dll => No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
FirewallRules: [{CF3C9690-00C2-4E5C-A497-BAEC6F51259A}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\secure_desktop_capture.exe No File
FirewallRules: [{F05F3FDB-DDF8-44D0-91E0-9617A4334792}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steam_monitor.exe No File
FirewallRules: [{1860D48A-9CC0-4F4D-BE35-369C9A65D27D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steamservice.exe No File
FirewallRules: [{0E4846DC-C3BB-4705-9BFA-8B788BD1B230}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x64launcher.exe No File
FirewallRules: [{AD3F52ED-A4E0-41E5-8248-3C9B5D4F435D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x86launcher.exe No File
FirewallRules: [{DB09AC30-BC0C-4B73-B7C4-774A26D74EF7}] => (Block) %ProgramFiles% (x86)\SteamOffline\Steam.exe No File
FirewallRules: [{1295BE83-306F-40D9-975B-7387A983C8EE}] => (Block) %ProgramFiles% (x86)\SteamOffline\GameOverlayUI.exe No File
FirewallRules: [{AB6B9F61-6967-472D-83A8-C26DDA9EC53D}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter.exe No File
FirewallRules: [{626C4DFE-BA94-4F73-95C9-5ADF45CB8DB5}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter64.exe No File
FirewallRules: [{35314E1E-E29E-4F71-BCE4-13F8E2734ACB}] => (Block) %ProgramFiles% (x86)\SteamOffline\streaming_client.exe No File
FirewallRules: [{E99D04FB-B761-46EC-96E7-29700FE2622D}] => (Block) %ProgramFiles% (x86)\SteamOffline\uninstall.exe No File
D:\Instalace\Programy - Instalace\AutoCAD_2008_64Bit\Crack\AutoCAD-2008-keygen.exe
D:\hry\Zalohovane\Nioh Complete Edition\nioh.exe
C:\Windows\Temp\tmp00000299\tmp00048142
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Policies\Explorer: []
Task: {B884968B-8738-4510-8563-C20B104A89A2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\wmshr.exe

EmptyTemp:
End
Uložte do D:\DOWNLOAD jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#9 Příspěvek od pang »

Antiviry jsem právě vždy před instalací kompletně odistalovával. Dnes by tam měl být Bitdefender. Tedy alespoň v listu nainstalovaných aplikaci je jen on. Tak netuším kde se stal zádrhel

zde log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 29-03-2020
Ran by Pang (29-03-2020 16:38:20) Run:1
Running from D:\DOWNLOAD
Loaded Profiles: Pang & (Available Profiles: defaultuser0 & Pang & anarc)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2016\en-US\acadficn.dll => No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
FirewallRules: [{CF3C9690-00C2-4E5C-A497-BAEC6F51259A}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\secure_desktop_capture.exe No File
FirewallRules: [{F05F3FDB-DDF8-44D0-91E0-9617A4334792}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steam_monitor.exe No File
FirewallRules: [{1860D48A-9CC0-4F4D-BE35-369C9A65D27D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\steamservice.exe No File
FirewallRules: [{0E4846DC-C3BB-4705-9BFA-8B788BD1B230}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x64launcher.exe No File
FirewallRules: [{AD3F52ED-A4E0-41E5-8248-3C9B5D4F435D}] => (Block) %ProgramFiles% (x86)\SteamOffline\bin\x86launcher.exe No File
FirewallRules: [{DB09AC30-BC0C-4B73-B7C4-774A26D74EF7}] => (Block) %ProgramFiles% (x86)\SteamOffline\Steam.exe No File
FirewallRules: [{1295BE83-306F-40D9-975B-7387A983C8EE}] => (Block) %ProgramFiles% (x86)\SteamOffline\GameOverlayUI.exe No File
FirewallRules: [{AB6B9F61-6967-472D-83A8-C26DDA9EC53D}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter.exe No File
FirewallRules: [{626C4DFE-BA94-4F73-95C9-5ADF45CB8DB5}] => (Block) %ProgramFiles% (x86)\SteamOffline\steamerrorreporter64.exe No File
FirewallRules: [{35314E1E-E29E-4F71-BCE4-13F8E2734ACB}] => (Block) %ProgramFiles% (x86)\SteamOffline\streaming_client.exe No File
FirewallRules: [{E99D04FB-B761-46EC-96E7-29700FE2622D}] => (Block) %ProgramFiles% (x86)\SteamOffline\uninstall.exe No File
D:\Instalace\Programy - Instalace\AutoCAD_2008_64Bit\Crack\AutoCAD-2008-keygen.exe
D:\hry\Zalohovane\Nioh Complete Edition\nioh.exe
C:\Windows\Temp\tmp00000299\tmp00048142
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\...\Policies\Explorer: []
Task: {B884968B-8738-4510-8563-C20B104A89A2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\wmshr.exe

EmptyTemp:
End

*****************

Processes closed successfully.
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6} => removed successfully
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98} => removed successfully
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D} => removed successfully
HKU\S-1-5-21-2446991580-1127670474-1602386914-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\AIMP => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\AIMP => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CF3C9690-00C2-4E5C-A497-BAEC6F51259A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F05F3FDB-DDF8-44D0-91E0-9617A4334792}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1860D48A-9CC0-4F4D-BE35-369C9A65D27D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E4846DC-C3BB-4705-9BFA-8B788BD1B230}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD3F52ED-A4E0-41E5-8248-3C9B5D4F435D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DB09AC30-BC0C-4B73-B7C4-774A26D74EF7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1295BE83-306F-40D9-975B-7387A983C8EE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB6B9F61-6967-472D-83A8-C26DDA9EC53D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{626C4DFE-BA94-4F73-95C9-5ADF45CB8DB5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{35314E1E-E29E-4F71-BCE4-13F8E2734ACB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E99D04FB-B761-46EC-96E7-29700FE2622D}" => removed successfully
"D:\Instalace\Programy - Instalace\AutoCAD_2008_64Bit\Crack\AutoCAD-2008-keygen.exe" => not found
"D:\hry\Zalohovane\Nioh Complete Edition\nioh.exe" => not found
"C:\Windows\Temp\tmp00000299\tmp00048142" => not found
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => could not remove, key could be protected
"HKU\S-1-5-21-2446991580-1127670474-1602386914-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B884968B-8738-4510-8563-C20B104A89A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B884968B-8738-4510-8563-C20B104A89A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
C:\WINDOWS\LastGood.Tmp => moved successfully
C:\WINDOWS\wmshr.exe => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 11296768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 52370121 B
Java, Flash, Steam htmlcache => 190046490 B
Windows/system/drivers => 11118132 B
Edge => 43630 B
Chrome => 285916591 B
Firefox => 4925299 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 147120 B
NetworkService => 2920266546 B
defaultuser0 => 2920266546 B
Pang => 2982929324 B
anarc => 2983491058 B
Mamka => 3019360991 B

RecycleBin => 0 B
EmptyTemp: => 14.3 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 29-03-2020 16:41:25)


Result of scheduled keys to remove after reboot:

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully

==== End of Fixlog 16:41:25 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#10 Příspěvek od Rudy »

Toto je co?
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {67773CDD-EA83-AD98-A2ED-386463EB3B0D}
AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Kaspersky Free (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
(WinDefender je vypnutý.)

Jinak smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#11 Příspěvek od pang »

Je to již znatelně lepší, děkuji vám moc za pomoc. Ale s těmi antiviry opravdu nevím. Vím že jsem je používal, ale jak říkám ..každý z nich jsem vždy před instalaci nového odinstalovával. V seznamu aplikaci v počítači nejsou a ani nic s nimi spojeného, vedlejší služby etc, tak netuším jak jinak se jich zbavit pokud tady ještě mám nějaké jejich pozůstatky
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#12 Příspěvek od Rudy »

Podívejte se na jejich stránky, zda nemají na ně odinstalátory. Pokud ano, stáhněte a použijte
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
pang
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 20 črc 2011 08:00

Re: Vytížení procesoru při nečinosti

#13 Příspěvek od pang »

Ještě jednou moc děkuji. Posílám příspěvek na provoz fóra. Hezký den
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vytížení procesoru při nečinosti

#14 Příspěvek od Rudy »

Hezký den i vám a nemáte zač! Za příspěvek děkujeme. :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“