Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventivní kontrola počítače

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
mykka
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 31 črc 2010 18:53

Preventivní kontrola počítače

#1 Příspěvek od mykka »

Dobré odpoledne, moc bych rád Vás poprosil o kontrolu stavu PC. Děkuji. Níže viz log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Monika at 2017-01-08 12:32:06
Microsoft Windows 10 Home
System drive C: has 16 GB (8%) free of 190 GB
Total RAM: 3980 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:32:23, on 08.01.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Monika.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKCU\..\Run: [BingSvc] C:\Users\Monika\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Monika\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9942 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\system32\FBAgent.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {7c9ca63c-c37b-451e-9ddc47c8cdf44a0c}
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel


"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
KBFiltr.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Monika\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0x238
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=6988 --on-initialized-event-handle=684 --parent-handle=688 /prefetch:6
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,17,21,37,54,65 --gpu-vendor-id=0x8086 --gpu-device-id=0x0106 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.4229 --gpu-driver-date=5-27-2015 --service-request-channel-token=A75FA7C61FC8A474E62967FC2073450C --mojo-platform-channel-handle=1348 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/*ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/*InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=643DD2A4890934E6539BB2065D87ECDB --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=643DD2A4890934E6539BB2065D87ECDB --mojo-platform-channel-handle=2336 /prefetch:1
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\WINDOWS\system32\hkcmd.exe"
"C:\WINDOWS\system32\igfxtray.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C997C18F88119E3B2A44D658E80E9AFC --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C997C18F88119E3B2A44D658E80E9AFC --mojo-platform-channel-handle=5988 /prefetch:1
"C:\Program Files\Windows Defender\msascui.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=006DEB45241A05E4671FFD68F36D288A --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=006DEB45241A05E4671FFD68F36D288A --mojo-platform-channel-handle=6348 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=7F3AB928717F86C751FA06297B13FE16 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=7F3AB928717F86C751FA06297B13FE16 --mojo-platform-channel-handle=4304 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/ControlCombined/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_91/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=D6CDEF8117E408FAF10B07D01DBF1FF7 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=D6CDEF8117E408FAF10B07D01DBF1FF7 --mojo-platform-channel-handle=4596 /prefetch:1
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 648 652 660 8192 656
"C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 570242F2-0AFB-E029-CEE5-8F14A102EFD3 -Reinvoke
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x3ec

"C:\Users\Monika\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2016-11-05 631808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BingSvc"=C:\Users\Monika\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-12 144008]
"OneDrive"=C:\Users\Monika\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-11-06 554184]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50605696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON]
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-08-24 107192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21 1156824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSPRP]
C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2012-11-23 3187360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\AsusWSPanel.exe [2012-08-31 3423104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray]
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-12-03 1256080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-07 13262480]

C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-08 12:32:06 ----D---- C:\rsit
2017-01-05 20:11:15 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-01-05 20:11:13 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-01-05 20:11:12 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-01-05 20:11:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-01-05 20:11:11 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-01-05 20:11:10 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-01-05 20:11:09 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-01-05 20:11:09 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2017-01-05 20:11:08 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2017-01-05 20:11:08 ----A---- C:\WINDOWS\system32\msi.dll
2017-01-05 20:11:07 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-01-05 20:11:07 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2017-01-05 20:11:06 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-01-05 20:11:06 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-01-05 20:11:06 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-01-05 20:11:05 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2017-01-05 20:11:05 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-01-05 20:11:05 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-01-05 20:11:04 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-01-05 20:11:04 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-01-05 20:11:03 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-01-05 20:11:02 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2017-01-05 20:11:02 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-01-05 20:11:02 ----A---- C:\WINDOWS\system32\ole32.dll
2017-01-05 20:11:02 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-01-05 20:11:01 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2017-01-05 20:11:01 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-01-05 20:11:01 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-01-05 20:11:01 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-01-05 20:11:01 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-01-05 20:11:01 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-01-05 20:11:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2017-01-05 20:11:00 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-01-05 20:10:59 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-01-05 20:10:59 ----A---- C:\WINDOWS\system32\wsecedit.dll
2017-01-05 20:10:59 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-05 20:10:58 ----A---- C:\WINDOWS\SYSWOW64\mfaudiocnv.dll
2017-01-05 20:10:58 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-01-05 20:10:57 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2017-01-05 20:10:57 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-01-05 20:10:56 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-01-05 20:10:56 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-05 20:10:56 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-01-05 20:10:55 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-01-05 20:10:55 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2017-01-05 20:10:55 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2017-01-05 20:10:55 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2017-01-05 20:10:55 ----A---- C:\WINDOWS\system32\services.exe
2017-01-05 20:10:55 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-01-05 20:10:54 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2017-01-05 20:10:54 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2017-01-05 20:10:53 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-01-05 20:10:53 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2017-01-05 20:10:53 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-01-05 20:10:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2017-01-05 20:10:52 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2017-01-05 20:10:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-05 20:10:52 ----A---- C:\WINDOWS\system32\lpremove.exe
2017-01-05 20:10:52 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-01-05 20:10:52 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-01-05 20:10:46 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2017-01-05 20:10:46 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2017-01-05 20:10:46 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2017-01-05 20:10:45 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2017-01-05 20:10:45 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2017-01-05 20:10:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-01-05 20:10:45 ----A---- C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-01-05 20:10:45 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-01-05 20:10:44 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-01-05 20:10:43 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2017-01-05 20:10:43 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-01-05 20:10:43 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-05 20:10:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-01-05 20:10:41 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-01-05 20:10:37 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-01-05 20:10:36 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-01-05 20:10:35 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-01-05 20:10:34 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-01-05 20:10:34 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-01-05 20:10:33 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-01-05 20:10:32 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-01-05 20:10:32 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-05 20:10:30 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-05 20:10:30 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-05 20:10:29 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2017-01-05 20:10:29 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-01-05 20:10:29 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-01-05 20:10:28 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-05 20:10:28 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-01-05 20:10:27 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-01-05 20:10:27 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-01-05 20:10:26 ----A---- C:\WINDOWS\system32\sppwinob.dll
2017-01-05 20:10:26 ----A---- C:\WINDOWS\system32\InputService.dll
2017-01-05 20:10:26 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-01-05 20:10:25 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-01-05 20:10:25 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-01-05 20:10:25 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-01-05 20:10:25 ----A---- C:\WINDOWS\system32\mfaudiocnv.dll
2017-01-05 20:10:25 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2017-01-05 20:10:24 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-01-05 20:10:24 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-01-05 20:10:24 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2017-01-05 20:10:23 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-01-05 20:10:23 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-01-05 20:10:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-01-05 20:10:22 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-01-05 20:10:22 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-01-05 20:10:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-01-05 20:10:21 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2017-01-05 20:10:21 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2017-01-05 20:10:20 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2017-01-05 20:10:20 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2017-01-05 20:10:20 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2017-01-05 20:10:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-01-05 20:10:20 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-01-05 20:10:20 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\zipfldr.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\StorSvc.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2017-01-05 20:10:19 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-01-05 20:10:18 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2017-01-05 20:10:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2017-01-05 20:10:17 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2017-01-05 20:10:17 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2017-01-05 20:10:17 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2017-01-05 20:10:16 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2017-01-05 20:10:16 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2017-01-05 20:10:16 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-01-05 20:10:16 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2017-01-05 20:10:16 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-05 20:10:16 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-01-05 20:10:16 ----A---- C:\WINDOWS\system32\drivers\modem.sys
2017-01-05 20:10:15 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2017-01-05 20:10:15 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-01-05 20:10:15 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2017-01-05 20:10:15 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2017-01-05 20:10:15 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2017-01-05 20:10:15 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-01-05 20:10:13 ----A---- C:\WINDOWS\system32\msctf.dll
2017-01-05 20:10:13 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-01-05 20:10:08 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-05 20:10:07 ----A---- C:\WINDOWS\system32\twinui.dll
2017-01-05 20:10:06 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-01-05 20:10:05 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-01-05 20:10:05 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-01-05 20:10:03 ----A---- C:\WINDOWS\system32\mos.dll
2017-01-05 20:10:02 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-01-05 20:10:00 ----A---- C:\WINDOWS\system32\cdp.dll
2017-01-05 20:09:59 ----A---- C:\WINDOWS\system32\MapRouter.dll
2017-01-05 20:09:58 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2017-01-05 20:09:58 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2017-01-05 20:09:57 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2017-01-05 20:09:56 ----A---- C:\WINDOWS\system32\wpncore.dll
2017-01-05 20:09:55 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-01-05 20:09:55 ----A---- C:\WINDOWS\system32\MapsStore.dll
2017-01-05 20:09:55 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-01-05 20:09:54 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-01-05 20:09:54 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-01-05 20:09:54 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-05 20:09:54 ----A---- C:\WINDOWS\explorer.exe
2017-01-05 20:09:53 ----A---- C:\WINDOWS\SYSWOW64\DeviceFlows.DataModel.dll
2017-01-05 20:09:53 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-01-05 20:09:53 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-01-05 20:09:52 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2017-01-05 20:09:52 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-01-05 20:09:52 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2017-01-05 20:09:52 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-01-05 20:09:51 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-01-05 20:09:51 ----A---- C:\WINDOWS\system32\moshostcore.dll
2017-01-05 20:09:51 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2017-01-05 20:09:51 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2017-01-05 20:09:50 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2017-01-05 20:09:50 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2017-01-05 20:09:50 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-01-05 20:09:50 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2017-01-05 20:09:49 ----A---- C:\WINDOWS\system32\MFPlay.dll
2017-01-05 20:09:49 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2017-01-05 20:09:48 ----A---- C:\WINDOWS\system32\user32.dll
2017-01-05 20:09:47 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\win32k.sys
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\securekernel.exe
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\MosStorage.dll
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\moshost.dll
2017-01-05 20:09:47 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2017-01-05 20:09:46 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2017-01-05 20:09:46 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-01-05 20:09:45 ----A---- C:\WINDOWS\system32\dialserver.dll
2017-01-05 20:09:44 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2017-01-05 20:09:44 ----A---- C:\WINDOWS\system32\winresume.exe
2017-01-05 20:09:44 ----A---- C:\WINDOWS\system32\winload.exe
2017-01-05 20:09:43 ----A---- C:\WINDOWS\system32\sendmail.dll
2017-01-05 20:09:43 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-05 20:09:43 ----A---- C:\WINDOWS\system32\gameux.dll
2017-01-05 20:09:41 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-05 20:09:41 ----A---- C:\WINDOWS\system32\stobject.dll
2017-01-05 20:09:41 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2017-01-05 20:09:40 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2017-01-05 20:09:40 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2017-01-05 20:09:40 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2017-01-05 20:09:40 ----A---- C:\WINDOWS\system32\BcastDVRHelper.dll
2017-01-05 20:09:39 ----A---- C:\WINDOWS\system32\NMAA.dll
2017-01-05 20:09:39 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2017-01-05 20:09:39 ----A---- C:\WINDOWS\system32\AppCapture.dll
2017-01-05 20:09:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-01-05 20:09:37 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-01-05 20:09:35 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-01-05 20:09:35 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-01-05 20:09:34 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-01-05 20:09:34 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-01-05 20:09:34 ----A---- C:\WINDOWS\system32\domgmt.dll
2017-01-05 20:09:33 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-05 20:09:33 ----A---- C:\WINDOWS\system32\combase.dll
2017-01-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-01-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-01-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-01-05 20:09:31 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-01-05 20:09:31 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-01-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-01-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-01-05 20:09:28 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-01-05 20:09:27 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-01-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2017-01-05 20:09:26 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2017-01-05 20:09:26 ----A---- C:\WINDOWS\system32\lsm.dll
2017-01-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-01-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-01-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-01-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2017-01-05 20:09:24 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2017-01-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-01-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-01-05 20:09:23 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-01-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-01-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-01-05 20:09:22 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-01-05 20:09:22 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2017-01-05 20:09:21 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2017-01-05 20:09:21 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-01-05 20:09:21 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-01-05 20:09:21 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2017-01-05 20:09:21 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\SYSWOW64\RTWorkQ.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\system32\wkssvc.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-01-05 20:09:20 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2017-01-05 20:09:19 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-01-05 20:09:19 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-01-05 20:09:19 ----A---- C:\WINDOWS\system32\migisol.dll
2017-01-05 20:09:19 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2017-01-05 20:09:19 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-01-05 20:09:18 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-01-05 20:09:18 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-01-05 20:09:18 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-01-05 20:09:18 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-01-05 20:09:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-01-05 20:09:17 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-01-05 20:09:17 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2017-01-05 20:09:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-05 20:09:16 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2017-01-05 20:09:16 ----A---- C:\WINDOWS\system32\sppnp.dll
2017-01-05 20:09:16 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-01-05 20:09:15 ----A---- C:\WINDOWS\system32\wincorlib.dll
2017-01-05 20:09:15 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2017-01-05 20:09:13 ----A---- C:\WINDOWS\system32\SRH.dll
2017-01-05 20:09:13 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2017-01-05 20:09:13 ----A---- C:\WINDOWS\system32\netshell.dll
2017-01-05 20:09:13 ----A---- C:\WINDOWS\system32\aitstatic.exe
2017-01-05 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2017-01-05 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-01-05 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2017-01-05 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-01-05 20:09:12 ----A---- C:\WINDOWS\system32\EAMProgressHandler.dll
2017-01-05 20:09:12 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-01-05 20:09:11 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2017-01-05 20:09:11 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2017-01-05 20:09:11 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-01-05 20:09:10 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2017-01-05 20:09:10 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-01-05 20:09:10 ----A---- C:\WINDOWS\system32\ReportingCSP.dll
2017-01-05 20:09:10 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2017-01-05 20:09:10 ----A---- C:\WINDOWS\system32\EDPCleanup.exe
2017-01-05 20:09:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-01-05 20:09:07 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-01-05 20:09:05 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-01-05 20:09:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-05 20:09:03 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-01-05 20:09:02 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-01-05 20:09:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-01-05 20:09:01 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-01-05 20:08:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-01-05 20:08:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-01-05 20:08:56 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-01-05 20:08:56 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-01-05 20:08:55 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-05 20:08:53 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-01-05 20:08:51 ----A---- C:\WINDOWS\system32\shell32.dll
2017-01-05 20:08:49 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-01-05 20:08:46 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-01-05 20:08:45 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-01-05 20:08:44 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-01-05 20:08:43 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-01-05 20:08:43 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2017-01-05 20:08:42 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-01-05 20:08:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-01-05 20:08:41 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2017-01-05 20:08:41 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-05 20:08:40 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-01-05 20:08:40 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2017-01-05 20:08:40 ----A---- C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-01-05 20:08:38 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-01-05 20:08:38 ----A---- C:\WINDOWS\system32\wpnprv.dll
2017-01-05 20:08:38 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-01-05 20:08:37 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-01-05 20:08:37 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-01-05 20:08:37 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-05 20:08:36 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-01-05 20:08:36 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-01-05 20:08:36 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-01-05 20:08:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-01-05 20:08:34 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2017-01-05 20:08:34 ----A---- C:\WINDOWS\system32\fveapi.dll
2017-01-05 20:08:33 ----A---- C:\WINDOWS\system32\wscsvc.dll
2017-01-05 20:08:33 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-01-05 20:08:33 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2017-01-05 20:08:33 ----A---- C:\WINDOWS\system32\cdd.dll
2017-01-05 20:08:32 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2017-01-05 20:08:32 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2017-01-05 20:08:32 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2017-01-05 20:08:28 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-01-05 20:08:28 ----A---- C:\WINDOWS\system32\setupugc.exe
2017-01-05 20:08:27 ----A---- C:\WINDOWS\system32\wininet.dll
2017-01-05 20:08:27 ----A---- C:\WINDOWS\system32\sspicli.dll
2017-01-05 20:08:27 ----A---- C:\WINDOWS\system32\RTWorkQ.dll
2017-01-05 20:08:27 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-01-05 20:08:26 ----A---- C:\WINDOWS\system32\vpnike.dll
2017-01-05 20:08:25 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-01-05 20:08:25 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2017-01-05 20:08:24 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-01-05 20:08:24 ----A---- C:\WINDOWS\system32\wscapi.dll
2017-01-05 20:08:24 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-01-05 20:08:24 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-01-05 20:08:23 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2017-01-05 20:08:21 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-05 20:08:21 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-01-05 20:08:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-05 20:08:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-05 20:08:20 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2017-01-05 20:08:20 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-01-05 20:08:20 ----A---- C:\WINDOWS\system32\umpoext.dll
2017-01-05 20:08:19 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-01-05 20:08:19 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-01-05 20:08:19 ----A---- C:\WINDOWS\system32\ntshrui.dll
2017-01-05 20:08:19 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-01-05 20:08:18 ----A---- C:\WINDOWS\SYSWOW64\NetCfgNotifyObjectHost.exe
2017-01-05 20:08:18 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-01-05 20:08:18 ----A---- C:\WINDOWS\system32\wscinterop.dll
2017-01-05 20:08:18 ----A---- C:\WINDOWS\system32\netplwiz.dll
2017-01-05 20:08:18 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-01-05 20:08:18 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-05 20:08:17 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2017-01-05 19:34:09 ----D---- C:\WINDOWS\PCHEALTH

======List of files/folders modified in the last 1 month======

2017-01-08 12:32:21 ----D---- C:\Program Files\trend micro
2017-01-08 12:32:13 ----D---- C:\WINDOWS\Prefetch
2017-01-08 12:31:35 ----D---- C:\WINDOWS\Temp
2017-01-08 11:53:00 ----D---- C:\WINDOWS\system32\sru
2017-01-08 11:03:03 ----RD---- C:\WINDOWS\assembly
2017-01-08 10:56:03 ----RD---- C:\WINDOWS\Microsoft.NET
2017-01-08 10:55:08 ----D---- C:\ProgramData\ASUS Smart Gesture
2017-01-08 10:55:03 ----D---- C:\WINDOWS\INF
2017-01-07 20:13:35 ----D---- C:\WINDOWS\system32\config
2017-01-07 20:06:04 ----D---- C:\WINDOWS\System32
2017-01-07 20:06:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-07 20:04:44 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2017-01-07 20:04:04 ----D---- C:\WINDOWS\AppReadiness
2017-01-07 20:03:16 ----AD---- C:\Program Files (x86)\TeamViewer
2017-01-07 20:02:18 ----D---- C:\WINDOWS\WinSxS
2017-01-07 19:58:48 ----D---- C:\WINDOWS\system32\DriverStore
2017-01-07 19:57:44 ----D---- C:\WINDOWS\system32\drivers
2017-01-07 19:54:14 ----D---- C:\WINDOWS\SYSWOW64\oobe
2017-01-07 19:54:13 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-01-07 19:54:13 ----D---- C:\WINDOWS\SYSWOW64\Dism
2017-01-07 19:54:13 ----D---- C:\WINDOWS\SysWOW64
2017-01-07 19:53:51 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-01-07 19:53:51 ----D---- C:\WINDOWS\system32\wbem
2017-01-07 19:53:51 ----D---- C:\WINDOWS\system32\Sysprep
2017-01-07 19:53:51 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-01-07 19:53:51 ----D---- C:\WINDOWS\system32\oobe
2017-01-07 19:53:50 ----D---- C:\WINDOWS\system32\en-US
2017-01-07 19:53:49 ----D---- C:\WINDOWS\system32\Dism
2017-01-07 19:53:25 ----D---- C:\WINDOWS\ShellExperiences
2017-01-07 19:53:24 ----D---- C:\WINDOWS\servicing
2017-01-07 19:53:23 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-01-07 19:53:22 ----D---- C:\WINDOWS\bcastdvr
2017-01-07 19:53:21 ----D---- C:\WINDOWS\AppPatch
2017-01-07 19:53:21 ----D---- C:\Windows
2017-01-07 19:53:21 ----D---- C:\Program Files\Internet Explorer
2017-01-07 19:53:21 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-07 19:53:13 ----D---- C:\WINDOWS\system32\Boot
2017-01-07 19:51:41 ----D---- C:\WINDOWS\system32\SleepStudy
2017-01-07 14:26:33 ----D---- C:\WINDOWS\CbsTemp
2017-01-07 12:55:50 ----HD---- C:\Program Files\WindowsApps
2017-01-07 12:44:33 ----D---- C:\WINDOWS\system32\catroot2
2017-01-05 19:40:49 ----D---- C:\WINDOWS\system32\MRT
2017-01-05 19:40:37 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-01-05 19:39:51 ----SHD---- C:\WINDOWS\Installer
2017-01-05 19:39:48 ----D---- C:\ProgramData\Microsoft Help
2017-01-05 19:31:54 ----SHD---- C:\System Volume Information
2016-12-22 16:46:08 ----RD---- C:\Program Files (x86)
2016-12-22 16:45:59 ----D---- C:\WINDOWS\Tasks
2016-12-16 19:30:07 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-12-16 19:15:42 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-12-12 00:56:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-12-11 20:04:43 ----RD---- C:\Program Files (x86)\Skype
2016-12-11 19:57:10 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-12-11 19:57:03 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-12-11 19:56:28 ----D---- C:\WINDOWS\system32\migwiz
2016-12-11 19:56:28 ----D---- C:\WINDOWS\system32\migration
2016-12-11 19:56:22 ----D---- C:\WINDOWS\system32\cs-CZ
2016-12-11 19:56:20 ----D---- C:\WINDOWS\system32\appraiser
2016-12-11 19:55:48 ----RSD---- C:\WINDOWS\Fonts
2016-12-11 19:55:45 ----D---- C:\Program Files\Windows Media Player
2016-12-11 19:55:45 ----D---- C:\Program Files (x86)\Windows Media Player

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-16 88576]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2016-07-16 8192]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2016-07-16 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2016-07-16 78336]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 ATP;@oem18.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2015-12-14 101368]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-11-05 84992]
R3 HIDSwitch;@oem19.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2015-05-13 19976]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-12-11 3258256]
R3 IntcDAud;@oem20.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-10-08 342528]
R3 kbfiltr;@oem3.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2016-07-16 121344]
R3 MEIx64;@oem17.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 netr28x;@oem0.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2015-06-12 2554528]
R3 rtbth;@oem13.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\WINDOWS\System32\drivers\rtbth.sys [2015-06-03 1219200]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2016-07-16 105824]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2016-07-16 101216]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-11-05 64352]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2016-07-16 58720]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2016-07-16 61792]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2016-07-16 32096]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 AmUStor;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2012-10-04 95232]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2016-07-16 9728]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-11-05 114176]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2016-11-05 249856]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-11-05 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-11-11 967168]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2016-07-16 38912]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-09-10 118272]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2016-07-16 20480]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2016-07-16 50016]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-11-05 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2016-07-16 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2016-07-16 526176]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2016-07-16 842584]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2016-07-16 108896]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2016-07-16 928608]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-07-16 183808]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-07-16 95744]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2016-07-16 50688]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2016-07-16 45568]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-07-16 263008]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2016-07-16 96608]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-07-16 137056]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2016-07-16 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2016-07-16 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2016-07-16 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-10-21 82128]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2013-01-07 1280768]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CDPUserSvc_4d9b57;CDPUserSvc_4d9b57; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 OneSyncSvc_4d9b57;Hostitel synchronizace_4d9b57; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-09-11 106880]
R3 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R3 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R3 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R3 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R3 PimIndexMaintenanceSvc_4d9b57;Data kontaktů_4d9b57; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 UnistoreSvc_4d9b57;Úložiště uživatelských dat_4d9b57; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R3 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2016-07-16 93184]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 MessagingService_4d9b57;Služba zasílání zpráv_4d9b57; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2016-11-05 1312768]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2016-07-16 287744]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola počítače

#2 Příspěvek od Rudy »

Zdravím!
Log vypadá OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
mykka
Návštěvník
Návštěvník
Příspěvky: 56
Registrován: 31 črc 2010 18:53

Re: Preventivní kontrola počítače

#3 Příspěvek od mykka »

Moc děkuji...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola počítače

#4 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Preventivní kontroly logů“