Logfile of random's system information tool 1.10 (written by random/random)
Run by Dada at 2017-05-04 19:52:33
Microsoft Windows 10 Home
System drive C: has 260 GB (68%) free of 381 GB
Total RAM: 8094 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:52:41, on 04.05.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Dada\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
C:\Program Files (x86)\Philips\Configo\2.1.7.0\Configo.exe
C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
C:\Program Files\trend micro\Dada.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus15.msn.com/?pc=ASTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://noblok.org/wpad.dat?9b8609629016 ... 7f26689758
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll
O2 - BHO: McAfee WebAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Module Loader] C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe -StartUpRun
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Dada\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: avast! SecureLine.lnk = C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.551\SSScheduler.exe
O4 - Global Startup: Philips Configo.lnk = C:\Program Files (x86)\Philips\Configo\2.1.7.0\Configo.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://files.creative.com/Web/softwareu ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://files.creative.com/Web/softwareu ... /CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3d0b6caf-a877-4b83-b3df-6efa1bc7da71}: NameServer = 82.163.143.176 82.163.142.178
O17 - HKLM\System\CCS\Services\Tcpip\..\{762304de-301d-4ed5-a037-af7d0d1080b5}: NameServer = 82.163.143.176 82.163.142.178
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 82.163.143.176 82.163.142.178
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 82.163.143.176 82.163.142.178
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: Asus GiftBox Desktop (ASUSGiftBoxDekstop) - ASUS - C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem32.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWoW64\esif_uf.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe
O23 - Service: McAfee Boot Delay Start Service (mcbootdelaystartsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.551\McCHSvc.exe
O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Service Controller (mfemms) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)
O23 - Service: McAfee Module Core Service (ModuleCoreService) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Intel Security PEF Service (PEFService) - Intel Security, Inc. - C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Robo-FTP 3.10 Scheduler Service (SchedulerService0310) - Serengeti Systems Incorporated - C:\Program Files (x86)\Robo-FTP 3.10\SchedulerService.exe
O23 - Service: Avast SecureLine (SecureLine) - Unknown owner - C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wondershare Application Framework Service (WsAppService) - Wondershare - C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe
--
End of file - 16302 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1a39c9fc-257a-4cc8-8be0-8df2b28801ca -SystemEventPortName:HostProcess-d225d672-36e0-4831-aa5d-02c993784609 -IoCancelEventPortName:HostProcess-8e57b02e-4619-4b51-b408-0f3f48feda3f -NonStateChangingEventPortName:HostProcess-f4bf03c5-16f0-4d2f-85ef-11c9be634639 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:44dd2de3-a080-4464-9500-c9fded13d261 -DeviceGroupId:
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
dashost.exe {a977b617-15ca-44c5-b476085ab116594c}
"C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
C:\WINDOWS\SysWoW64\esif_uf.exe
"C:\Windows\system32\mfevtps.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe"
"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
"C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe"
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Windows\system32\mfevtps.exe" -mms
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" -mms
"C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
sihost.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
C:\WINDOWS\Explorer.EXE
adb fork-server server
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
igfxEM.exe
igfxHK.exe
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
igfxTray.exe
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\System32\rundll32.exe" sbavmon.dll,SBAVMonitor
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Users\Dada\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\AVAST Software\SecureLine\SecureLine.exe" /nogui
"C:\Program Files\McAfee Security Scan\3.11.551\SSScheduler.exe"
C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe /platui /runkey
"C:\Program Files (x86)\Philips\Configo\2.1.7.0\Configo.exe" --daemon
"C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" -StartUpRun
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe" /r
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan-3696 C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe"
"fontdrvhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe" --onOSstartup=true --showwindow=false --waitForRegistration=true
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --disable-databases --primordial-pipe-token=9321A907CD7D3C7313C141211075ED84 --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\Dada\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/4.0.0.185" --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3696.0.720326522\1870234694" --mojo-platform-channel-handle=2192 /prefetch:1
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --disable-databases --primordial-pipe-token=1C55C4C5A660D6C6C5AF495538E8BB0E --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\Dada\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/4.0.0.185" --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3696.1.380345076\2005705138" --mojo-platform-channel-handle=2960 /prefetch:1
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\main.js"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe"
C:\WINDOWS\system32\AUDIODG.EXE 0x300
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe"
"C:\Program Files (x86)\Robo-FTP 3.10\SchedulerService.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\WINDOWS\system32\msconfig.exe"
"C:\WINDOWS\System32\Taskmgr.exe" /7 /Startup
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Dada\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Dada\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=58.0.3029.96 --initial-client-data=0x1a4,0x1a8,0x1ac,0x1a0,0x1b0,0x7ffdc58c2968,0x7ffdc58c2980,0x7ffdc58c2990
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=11884 --on-initialized-event-handle=572 --parent-handle=576 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=776 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,19,23,41,61,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x8086 --gpu-device-id=0x1616 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=20.19.15.4549 --gpu-driver-date=11-10-2016 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x1346 --service-request-channel-token=B42D4A2B0D7C5C475A726F3BE0B6713B --mojo-platform-channel-handle=1420 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=4C8382A282D602010F0C1C63ED9AD376 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=4C8382A282D602010F0C1C63ED9AD376 --renderer-client-id=4 --mojo-platform-channel-handle=2720 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=3D217CF2D86E2E91F44C58AE0EC827C6 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=3D217CF2D86E2E91F44C58AE0EC827C6 --renderer-client-id=5 --mojo-platform-channel-handle=3188 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=3CC2266BCA6E809E0F87B55B53DF519A --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=3CC2266BCA6E809E0F87B55B53DF519A --renderer-client-id=14 --mojo-platform-channel-handle=5508 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --lang=cs --service-request-channel-token=723933340CBC97E7A05536515A392966 --mojo-platform-channel-handle=5748 --ignored=" --type=renderer " /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=D38833AC48827D7A59851556AD90661F --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=D38833AC48827D7A59851556AD90661F --renderer-client-id=17 --mojo-platform-channel-handle=6132 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=60A07069D7E5FEB47F7B83B9070A0FCD --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=60A07069D7E5FEB47F7B83B9070A0FCD --renderer-client-id=21 --mojo-platform-channel-handle=3536 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=776 --primordial-pipe-token=8F9522B87019697233E19CC2085EB65E --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553 --service-request-channel-token=8F9522B87019697233E19CC2085EB65E --renderer-client-id=24 --mojo-platform-channel-handle=6300 /prefetch:1
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 644 648 656 8192 652
"C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 1C939664-24C2-494F-1FCF-7DCF927E8436 -Reinvoke
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Users\Dada\Downloads\RSITx64.exe"
=========Mozilla firefox=========
ProfilePath - C:\Users\Dada\AppData\Roaming\Mozilla\Firefox\Profiles\d7pkqr4x.default
prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gfe_rd=cr&ei=zSB ... 8wf0x7voDQ"
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.148 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.121.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.148 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_148.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.121.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll
C:\Users\Dada\AppData\Roaming\Mozilla\Firefox\Profiles\d7pkqr4x.default\searchplugins\
McSiteAdvisor.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-02-01 571456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2017-04-26 189288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-01 234560]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-01 473152]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2017-04-26 160192]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-01 186944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]
"Creative SB Monitoring Utility"=RunDll32 sbavmon.dll,SBAVMonitor []
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-28 631808]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Dada\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-04-08 1518808]
"BlueStacks Agent"=C:\Program Files (x86)\BlueStacks\HD-Agent.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Module Loader"=C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [2007-07-23 57344]
"VolPanel"=C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe [2010-12-08 241757]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-12-12 587288]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2017-03-27 2404952]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
avast! SecureLine.lnk - C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.551\SSScheduler.exe
Philips Configo.lnk - C:\Program Files (x86)\Philips\Configo\2.1.7.0\Configo.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2017-05-04 19:52:34 ----D---- C:\Program Files\trend micro
2017-05-04 19:52:33 ----D---- C:\rsit
2017-05-03 21:37:27 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2017-05-03 21:29:28 ----D---- C:\ProgramData\McAfee Security Scan
2017-05-03 21:26:17 ----HD---- C:\$AV_AVG
2017-05-03 21:24:51 ----D---- C:\ProgramData\5e9c77a4-3097-0
2017-05-03 21:24:46 ----D---- C:\ProgramData\{F2981EFF-4533-A954-AE69-34E1F0B0F117}
2017-05-03 21:24:46 ----D---- C:\ProgramData\{39D8B5D9-8E73-0272-1605-0AA55DC4C4D6}
2017-05-03 21:24:45 ----D---- C:\ProgramData\{D17E19BC-66D5-AE17-B9F3-90A01253BF67}
2017-05-03 21:24:45 ----D---- C:\ProgramData\{315D2DD0-86F6-9A7B-2C8C-610D1D54DA11}
2017-05-03 21:24:32 ----D---- C:\ProgramData\{2e211df8-512c-0}
2017-05-03 21:24:31 ----D---- C:\ProgramData\{72ff7bdb-412c-1}
2017-04-23 23:16:32 ----D---- C:\ProgramData\BlueStacksSetup
2017-04-21 17:28:10 ----D---- C:\Users\Dada\AppData\Roaming\TunnelBear
2017-04-16 22:57:03 ----D---- C:\ProgramData\5e9c77a4-5bc5-0
2017-04-16 22:52:55 ----D---- C:\ProgramData\5e9c77a4-7f21-0
2017-04-16 22:52:48 ----D---- C:\ProgramData\7e3ddf3c
2017-04-16 22:52:05 ----D---- C:\ProgramData\{6fbc63e6-112c-0}
2017-04-16 22:52:05 ----D---- C:\ProgramData\{252157fd-512c-1}
2017-04-14 22:34:19 ----A---- C:\WINDOWS\SYSWOW64\vp6vfw.dll
2017-04-14 22:34:10 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2017-04-14 22:34:10 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2017-04-14 21:27:19 ----D---- C:\Program Files (x86)\Origin Games
2017-04-14 12:51:49 ----D---- C:\ProgramData\Origin
2017-04-14 12:51:49 ----D---- C:\ProgramData\Electronic Arts
2017-04-14 12:51:38 ----AD---- C:\Program Files (x86)\Origin
2017-04-13 16:28:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-13 16:28:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-04-13 16:28:39 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-04-13 16:28:39 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-04-13 16:28:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-04-13 16:28:38 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-04-13 16:28:38 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-04-13 16:28:37 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-04-13 16:28:36 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-04-13 16:28:35 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2017-04-13 16:28:34 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-04-13 16:28:33 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-04-13 16:28:32 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-04-13 16:28:31 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-04-13 16:28:30 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.SystemManagement.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-04-13 16:28:29 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 16:28:28 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2017-04-13 16:28:27 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2017-04-13 16:28:26 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2017-04-13 16:28:25 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-04-13 16:28:24 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-04-13 16:28:24 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-04-13 16:28:23 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\RADCUI.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-04-13 16:28:22 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\mfmjpegdec.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2017-04-13 16:28:21 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2017-04-13 16:28:20 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2017-04-13 16:28:19 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2017-04-13 16:28:19 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2017-04-13 16:28:19 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-04-13 16:28:19 ----A---- C:\WINDOWS\SYSWOW64\ipsecsnp.dll
2017-04-13 16:28:19 ----A---- C:\WINDOWS\SYSWOW64\apds.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Devices.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Lights.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerUI.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\SYSWOW64\ipsmsnap.dll
2017-04-13 16:28:18 ----A---- C:\WINDOWS\system32\drivers\BasicDisplay.sys
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\XblAuthManagerProxy.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\enrollmentapi.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-04-13 16:28:17 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2017-04-13 16:28:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-04-13 16:28:16 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2017-04-13 16:28:16 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-04-13 16:28:16 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2017-04-13 16:28:16 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-04-13 16:28:15 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-04-13 16:28:15 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2017-04-13 16:28:15 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-04-13 16:28:15 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-04-13 16:28:15 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-04-13 16:28:14 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-04-13 16:28:12 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-04-13 16:28:12 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-04-13 16:28:11 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-04-13 16:28:11 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-04-13 16:28:11 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-04-13 16:28:10 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-04-13 16:28:10 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-04-13 16:28:10 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-04-13 16:28:10 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 16:28:10 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-04-13 16:28:10 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-04-13 16:28:09 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-04-13 16:28:09 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-04-13 16:28:09 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-04-13 16:28:09 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-04-13 16:28:09 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-04-13 16:28:08 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-04-13 16:28:08 ----A---- C:\WINDOWS\system32\WinRtTracing.dll
2017-04-13 16:28:08 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-04-13 16:28:08 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-04-13 16:28:08 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-04-13 16:28:07 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-04-13 16:28:05 ----A---- C:\WINDOWS\system32\shell32.dll
2017-04-13 16:28:04 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-04-13 16:28:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-04-13 16:28:03 ----A---- C:\WINDOWS\system32\mos.dll
2017-04-13 16:28:02 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-04-13 16:28:01 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2017-04-13 16:28:01 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-04-13 16:28:01 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-04-13 16:28:00 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-04-13 16:28:00 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-04-13 16:28:00 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-04-13 16:27:59 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-04-13 16:27:59 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-04-13 16:27:59 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-04-13 16:27:59 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\usocore.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\oleaut32.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-04-13 16:27:58 ----A---- C:\WINDOWS\system32\LsaIso.exe
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-04-13 16:27:57 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-04-13 16:27:56 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-04-13 16:27:56 ----A---- C:\WINDOWS\system32\EmailApis.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2017-04-13 16:27:55 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\wscapi.dll
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-04-13 16:27:54 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-04-13 16:27:53 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2017-04-13 16:27:53 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2017-04-13 16:27:53 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2017-04-13 16:27:52 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2017-04-13 16:27:41 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-04-13 16:27:41 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2017-04-13 16:27:41 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-04-13 16:27:41 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-04-13 16:27:40 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 16:27:40 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 16:27:40 ----A---- C:\WINDOWS\system32\rdpencom.dll
2017-04-13 16:27:40 ----A---- C:\WINDOWS\system32\localspl.dll
2017-04-13 16:27:39 ----A---- C:\WINDOWS\system32\wpninprc.dll
2017-04-13 16:27:39 ----A---- C:\WINDOWS\system32\RdpRelayTransport.dll
2017-04-13 16:27:39 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-04-13 16:27:39 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-04-13 16:27:38 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-04-13 16:27:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-04-13 16:27:35 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-04-13 16:27:34 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-04-13 16:27:33 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-04-13 16:27:32 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-04-13 16:27:32 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-04-13 16:27:31 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-04-13 16:27:30 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2017-04-13 16:27:30 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-04-13 16:27:29 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-04-13 16:27:29 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\quartz.dll
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\ole32.dll
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-04-13 16:27:28 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-04-13 16:27:27 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-04-13 16:27:27 ----A---- C:\WINDOWS\system32\wininet.dll
2017-04-13 16:27:27 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-04-13 16:27:27 ----A---- C:\WINDOWS\HelpPane.exe
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-04-13 16:27:26 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-04-13 16:27:24 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-04-13 16:27:24 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-04-13 16:27:24 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-04-13 16:27:23 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2017-04-13 16:27:22 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-04-13 16:27:22 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 16:27:22 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-04-13 16:27:22 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-13 16:27:22 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\d2d1.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-04-13 16:27:21 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-04-13 16:27:20 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\FontProvider.dll
2017-04-13 16:27:19 ----A---- C:\WINDOWS\system32\dafpos.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\mfmjpegdec.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\Geolocation.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-04-13 16:27:18 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-04-13 16:27:17 ----A---- C:\WINDOWS\system32\DeviceDirectoryClient.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\DdcWnsListener.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-04-13 16:27:16 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-04-13 16:27:15 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-04-13 16:27:15 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-04-13 16:27:15 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2017-04-13 16:27:15 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-04-13 16:27:15 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2017-04-13 16:27:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-04-13 16:27:10 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-04-13 16:27:10 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-04-13 16:27:10 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-04-13 16:27:09 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-04-13 16:27:09 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-04-13 16:27:09 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-04-13 16:27:08 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-04-13 16:27:07 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-04-13 16:27:07 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-04-13 16:27:07 ----A---- C:\WINDOWS\system32\twinui.dll
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-04-13 16:27:06 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\sbe.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\qedit.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\dlnashext.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2017-04-13 16:27:05 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\wer.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-04-13 16:27:04 ----A---- C:\WINDOWS\system32\AppContracts.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\psmsrv.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\invagent.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\devinv.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-04-13 16:27:03 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-04-13 16:27:02 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\oleacc.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2017-04-13 16:27:01 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-04-13 16:27:00 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-04-13 16:27:00 ----A---- C:\WINDOWS\system32\vss_ps.dll
2017-04-13 16:27:00 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-04-13 16:27:00 ----A---- C:\WINDOWS\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-13 16:27:00 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\WSManMigrationPlugin.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\vaultcli.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\TokenBrokerUI.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\Family.Client.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-04-13 16:26:59 ----A---- C:\WINDOWS\system32\cdp.dll
2017-04-13 16:26:58 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-04-13 16:26:58 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-04-13 16:26:58 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-04-13 16:26:58 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-04-13 16:26:58 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2017-04-13 16:26:58 ----A---- C:\WINDOWS\system32\atmlib.dll
2017-04-12 17:24:14 ----D---- C:\Program Files (x86)\AVG
2017-04-12 17:22:51 ----HD---- C:\ProgramData\Common Files
2017-04-12 17:22:51 ----AD---- C:\ProgramData\Avg
======List of files/folders modified in the last 1 month======
2017-05-04 19:52:34 ----RD---- C:\Program Files
2017-05-04 19:52:33 ----D---- C:\WINDOWS\Prefetch
2017-05-04 19:19:26 ----D---- C:\WINDOWS\Temp
2017-05-04 19:09:22 ----AD---- C:\WINDOWS\System32
2017-05-04 19:09:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-04 19:03:12 ----D---- C:\ProgramData\ASUS Smart Gesture
2017-05-04 19:00:08 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-05-04 18:58:49 ----D---- C:\WINDOWS\system32\sru
2017-05-04 18:58:10 ----D---- C:\WINDOWS\system32\NDF
2017-05-04 18:52:49 ----D---- C:\WINDOWS\system32\Tasks
2017-05-04 18:50:35 ----D---- C:\WINDOWS\system32\drivers
2017-05-04 00:31:12 ----D---- C:\Program Files (x86)
2017-05-04 00:30:23 ----SHDC---- C:\WINDOWS\Installer
2017-05-04 00:07:06 ----D---- C:\WINDOWS\system32\SleepStudy
2017-05-04 00:03:41 ----D---- C:\WINDOWS\system32\config
2017-05-03 21:59:27 ----D---- C:\WINDOWS\AppReadiness
2017-05-03 21:59:10 ----D---- C:\WINDOWS\CbsTemp
2017-05-03 21:58:53 ----D---- C:\WINDOWS\system32\appraiser
2017-05-03 21:58:36 ----SHD---- C:\System Volume Information
2017-05-03 21:55:47 ----HD---- C:\Program Files\WindowsApps
2017-05-03 21:41:05 ----D---- C:\WINDOWS\system32\catroot2
2017-05-03 21:37:27 ----D---- C:\WINDOWS\SysWOW64
2017-05-03 21:37:23 ----D---- C:\WINDOWS\WinSxS
2017-05-03 21:29:41 ----D---- C:\Program Files\McAfee Security Scan
2017-05-03 21:29:29 ----HD---- C:\ProgramData
2017-05-01 18:52:27 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-01 18:52:27 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2017-04-30 10:06:22 ----RD---- C:\WINDOWS\Microsoft.NET
2017-04-29 15:12:57 ----RSD---- C:\WINDOWS\assembly
2017-04-29 10:26:10 ----D---- C:\Users\Dada\AppData\Roaming\vlc
2017-04-26 00:17:23 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-04-26 00:17:09 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-04-26 00:16:25 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-04-26 00:16:25 ----D---- C:\Program Files (x86)\Common Files
2017-04-21 18:01:16 ----D---- C:\Users\Dada\AppData\Roaming\uTorrent
2017-04-21 17:52:48 ----D---- C:\ProgramData\Package Cache
2017-04-21 17:45:04 ----D---- C:\WINDOWS\INF
2017-04-21 17:45:03 ----D---- C:\WINDOWS\system32\DriverStore
2017-04-20 22:22:07 ----D---- C:\Windows
2017-04-20 16:16:50 ----DC---- C:\WINDOWS\Panther
2017-04-20 16:16:50 ----D---- C:\WINDOWS\system32\Sysprep
2017-04-20 15:42:36 ----D---- C:\WINDOWS\system32\WDI
2017-04-16 22:52:58 ----D---- C:\ProgramData\72bc1421-7b15-1
2017-04-16 22:52:58 ----D---- C:\ProgramData\72bc1421-3465-0
2017-04-16 20:29:06 ----D---- C:\WINDOWS\rescache
2017-04-14 23:23:59 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-04-14 23:23:59 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2017-04-14 23:23:59 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-04-14 23:23:59 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-04-14 23:23:57 ----D---- C:\WINDOWS\system32\wbem
2017-04-14 23:23:57 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-04-14 23:23:57 ----D---- C:\WINDOWS\system32\setup
2017-04-14 23:23:57 ----D---- C:\WINDOWS\system32\migration
2017-04-14 23:23:56 ----SD---- C:\WINDOWS\system32\F12
2017-04-14 23:23:56 ----D---- C:\WINDOWS\system32\Dism
2017-04-14 23:23:56 ----D---- C:\WINDOWS\system32\cs-CZ
2017-04-14 23:23:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-04-14 23:23:55 ----RD---- C:\Program Files\Windows Defender
2017-04-14 23:23:55 ----D---- C:\WINDOWS\ShellExperiences
2017-04-14 23:23:55 ----D---- C:\WINDOWS\Provisioning
2017-04-14 23:23:55 ----D---- C:\Program Files\Windows Photo Viewer
2017-04-14 23:23:55 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-04-14 23:23:55 ----D---- C:\Program Files (x86)\Windows Defender
2017-04-14 22:34:07 ----D---- C:\WINDOWS\Logs
2017-04-13 16:02:19 ----D---- C:\WINDOWS\system32\MRT
2017-04-13 15:59:00 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-04-13 00:41:04 ----AD---- C:\Program Files (x86)\Robo-FTP 3.10
2017-04-11 16:10:15 ----D---- C:\WINDOWS\system32\Macromed
2017-04-11 16:10:12 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2017-04-10 15:25:46 ----D---- C:\ProgramData\boost_interprocess
2017-04-09 12:52:44 ----RSD---- C:\WINDOWS\Fonts
2017-04-08 19:58:43 ----N---- C:\WINDOWS\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2015-08-10 1462720]
R0 IntelHSWPcc;IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [2015-06-26 88256]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2016-04-27 843048]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\WINDOWS\system32\drivers\mfewfpk.sys [2016-04-27 243488]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2015-05-08 20096]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-16 88576]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2016-07-16 8192]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2015-05-08 18048]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2016-07-16 48128]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2015-05-25 21816]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw8x.sys [2016-07-16 4233728]
R3 ATP;@oem26.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2015-12-14 101368]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-07-29 601624]
R3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2016-10-05 168448]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-10-05 114176]
R3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth handsfree; C:\WINDOWS\system32\DRIVERS\BthHfAud.sys [2016-07-16 37376]
R3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2016-10-05 249856]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-10-05 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-10-05 84992]
R3 cfwids;McAfee Inc. cfwids; C:\WINDOWS\system32\drivers\cfwids.sys [2016-04-27 78632]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2015-08-17 53752]
R3 dptf_pch;dptf_pch; C:\WINDOWS\System32\drivers\dptf_pch.sys [2015-08-17 50696]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-08-17 261624]
R3 HIDSwitch;@oem7.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2015-08-19 27872]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2016-11-30 7969760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-07-30 4577024]
R3 MEIx64;@oem3.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2015-07-28 184608]
R3 mfeaack;McAfee Inc. mfeaack; C:\WINDOWS\system32\drivers\mfeaack.sys [2016-04-27 419616]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2016-04-27 349480]
R3 mfefirek;McAfee Inc. mfefirek; C:\WINDOWS\system32\drivers\mfefirek.sys [2016-04-27 493352]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [2016-08-01 519456]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2016-06-06 46240]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_d4715679184092a8\nvlddmkm.sys [2016-09-12 13754936]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-07-16 183808]
R3 rt640x64;@oem21.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-15 887552]
R3 RTSUER;@oem28.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-27 420440]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2016-07-16 105824]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2016-07-16 101216]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2016-04-27 83608]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2016-07-16 58720]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2016-07-16 61792]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\System32\drivers\athurx.sys [2010-01-05 1847296]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2016-07-16 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-11-11 967168]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2016-07-16 38912]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-09-10 118272]
S3 dg_ssudbus;@oem78.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2016-09-05 131712]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2016-07-16 20480]
S3 Hamachi;@oem19.inf,%Hamachi.Service.DispName%;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2016-11-11 45680]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2016-07-16 50016]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\WINDOWS\system32\drivers\HipShieldK.sys [2016-08-02 216704]
S3 HTCAND64;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;@oem30.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-10-05 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2016-07-16 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2016-07-16 526176]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 IntcDAud;@oem58.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-05-12 481768]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 ksaud;@oem25.inf,%KSAUD.SvcDesc%;Creative USB Audio Driver; C:\WINDOWS\system32\drivers\ksaud.sys [2016-08-22 1591296]
S3 mfencrk;McAfee Inc. mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [2016-08-01 100136]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2016-07-16 842584]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2016-07-16 108896]
S3 Neo_VPN;@oem6.inf,%Neo.Service.DispName%;VPN Client Device Driver - VPN; C:\WINDOWS\System32\drivers\neo_vpn.sys [2016-10-11 22784]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2015-12-20 452240]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2016-07-16 928608]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 ssudmdm;@oem82.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2016-09-05 165504]
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
kontrola logu a vyřešení problémů díky
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119670
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu a vyřešení problémů díky
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu a vyřešení problémů díky
log se neotevřel
-
Rudy
- Site Admin
- Příspěvky: 119670
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu a vyřešení problémů díky
Dejte tedy log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?