Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Napíchnutý PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Napíchnutý PC

#1 Příspěvek od rolas »

Zdravím,
řešíme aktuálně problém, že jsme se stali asi zřejmě obětí stalkingu. Na FB jsem si všiml, že se přihlašuje neznámé zařízení, také došlo z ničeho nic ke změně tapety. Navíc je možné, že i mobil je toho součástí (získané tel čísla). Kdyby někdo věděl co s mobilem, respektive jak tuto situaci řešit, tak budu rád, jedná se o Android 7 LG G3 a LG G4.

Zde je log z RSIT. Počítač byl nedávno formátovaný.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Roland at 2017-09-30 17:04:10
Microsoft Windows 10 Home
System drive C: has 512 GB (89%) free of 572 GB
Total RAM: 8081 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:08:05, on 30.09.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0608)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files\trend micro\Roland.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Roland\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem26.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\Windows\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 11077 bytes

======Listing Processes======







C:\Windows\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
"fontdrvhost.exe"
C:\Windows\system32\svchost.exe -k DcomLaunch
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
c:\windows\system32\svchost.exe -k localservice -s bthserv
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s hidserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
c:\windows\system32\svchost.exe -k localservice -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
dashost.exe {1f935977-1859-47c1-a8e625018cce7423}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -s netprofm
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -s SENS
C:\Windows\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s FontCache
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\WLANExt.exe 1327643465152
\??\C:\Windows\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
C:\Windows\system32\ibtsiva
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
C:\Windows\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000


"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe

c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s FDResPub
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s HomeGroupProvider
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
c:\windows\system32\svchost.exe -k localservice -s SstpSvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s wcncsvc
c:\windows\system32\svchost.exe -k localservice -s LicenseManager
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s QWAVE
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DsSvc
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

C:\Windows\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\Windows\Explorer.EXE
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe" -critical
C:\Windows\system32\svchost.exe -k netsvcs -s wlidsvc
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.26.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\system32\svchost.exe -k LocalService -s WinHttpAutoProxySvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s seclogon
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s Netman
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Roland\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=61.0.3163.100 --initial-client-data=0x1f4,0x1f8,0x1fc,0x1f0,0x200,0x7ffcc6cd1988,0x7ffcc6cd1948,0x7ffcc6cd1958
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=6020 --on-initialized-event-handle=660 --parent-handle=664 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --supports-dual-gpus=false --gpu-driver-bug-workarounds=9,12,13,23,27,29,49,70,84 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=20.19.15.4549 --gpu-driver-date=11-10-2016 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x139a --service-request-channel-token=2DFEC8A8A688F57F4E57AA81C36C30B5 --mojo-platform-channel-handle=1552 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=649867F58C687953028B17A10F86B00E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=649867F58C687953028B17A10F86B00E --renderer-client-id=4 --mojo-platform-channel-handle=3128 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=CED38FB68168909644C01E2311E6720D --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=CED38FB68168909644C01E2311E6720D --renderer-client-id=5 --mojo-platform-channel-handle=3256 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=837F0562E57C3D40ABB7320D846A141E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=837F0562E57C3D40ABB7320D846A141E --renderer-client-id=6 --mojo-platform-channel-handle=3312 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=D0AA9651733CC254D904DA4ED6A54817 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=D0AA9651733CC254D904DA4ED6A54817 --renderer-client-id=12 --mojo-platform-channel-handle=1152 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=78DFB312F4E595A646E907FDB7B1F9A9 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=78DFB312F4E595A646E907FDB7B1F9A9 --renderer-client-id=16 --mojo-platform-channel-handle=7640 /prefetch:1
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -s lmhosts
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -s NcdAutoSetup
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1536,7499091499897327067,1888743943965931111,131072 --service-pipe-token=32CE2FDC71CEE5F8D5B7B2BED6DFEFCB --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=32CE2FDC71CEE5F8D5B7B2BED6DFEFCB --renderer-client-id=22 --mojo-platform-channel-handle=7444 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
"D:\Download\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -s WdiSystemHost
C:\Windows\system32\AUDIODG.EXE 0x35c

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-09-24 149696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-24 2179272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2017-09-19 1923008]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Roland\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background []
"AdobeBridge"= []
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2017-09-15 40258552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-09-30 17:04:11 ----D---- C:\Program Files\trend micro
2017-09-30 17:04:10 ----D---- C:\rsit
2017-09-26 19:44:35 ----D---- C:\Users\Roland\AppData\Roaming\CUE Tools
2017-09-25 19:41:13 ----D---- C:\Users\Roland\AppData\Roaming\MPC-HC
2017-09-25 14:56:10 ----D---- C:\ProgramData\Riot Games
2017-09-25 14:54:03 ----D---- C:\Windows\SYSWOW64\XPSViewer
2017-09-25 14:53:54 ----D---- C:\Program Files\Reference Assemblies
2017-09-25 14:53:54 ----D---- C:\Program Files\MSBuild
2017-09-25 14:53:54 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-09-25 14:53:54 ----D---- C:\Program Files (x86)\MSBuild
2017-09-25 14:52:44 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2017-09-25 14:52:44 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2017-09-25 14:52:44 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-09-25 14:52:36 ----A---- C:\Windows\system32\TsWpfWrp.exe
2017-09-25 14:52:36 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2017-09-25 14:52:36 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-09-25 14:50:56 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-09-25 14:50:56 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-09-25 14:50:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-09-25 14:50:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-09-25 14:50:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-09-25 14:50:52 ----D---- C:\Riot Games
2017-09-25 14:49:10 ----D---- C:\Users\Roland\AppData\Roaming\Riot Games
2017-09-24 11:42:08 ----HD---- C:\Windows\system32\WLANProfiles
2017-09-24 11:41:57 ----D---- C:\Users\Roland\AppData\Roaming\Intel
2017-09-24 11:41:51 ----D---- C:\ProgramData\Roaming
2017-09-24 11:41:34 ----D---- C:\Program Files\Common Files\Intel
2017-09-24 11:36:03 ----A---- C:\Windows\system32\drivers\semav6msr64.sys
2017-09-24 11:36:00 ----D---- C:\ProgramData\Intel
2017-09-24 11:35:48 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-09-24 11:25:49 ----AD---- C:\Program Files\Common Files\DESIGNER
2017-09-24 11:19:36 ----AD---- C:\Program Files\Image Resizer for Windows
2017-09-24 11:19:36 ----AD---- C:\Program Files (x86)\Image Resizer for Windows
2017-09-24 11:17:32 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2017-09-24 11:16:23 ----D---- C:\Program Files\Adobe
2017-09-24 11:14:43 ----AD---- C:\Program Files (x86)\Adobe
2017-09-24 11:12:02 ----D---- C:\Program Files\Common Files\Adobe
2017-09-24 11:07:35 ----D---- C:\Users\Roland\AppData\Roaming\Macromedia
2017-09-24 11:07:33 ----D---- C:\ProgramData\Adobe
2017-09-24 10:59:41 ----D---- C:\ProgramData\USBChargerPlus
2017-09-24 10:51:02 ----D---- C:\Program Files (x86)\ICEpower
2017-09-24 10:44:24 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-09-24 10:44:24 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-09-24 10:44:23 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-09-24 10:44:23 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-09-24 10:44:22 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-09-24 10:44:22 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-09-24 10:44:21 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2017-09-24 10:44:21 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2017-09-24 10:44:21 ----A---- C:\Windows\system32\nvspcap64.dll
2017-09-24 10:44:21 ----A---- C:\Windows\system32\nvspbridge64.dll
2017-09-24 10:44:21 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2017-09-24 10:43:53 ----A---- C:\Windows\NvTelemetryContainerRecovery.bat
2017-09-24 10:43:52 ----D---- C:\Program Files (x86)\VulkanRT
2017-09-24 10:43:52 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2017-09-24 10:43:52 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2017-09-24 10:43:52 ----A---- C:\Windows\system32\vulkaninfo.exe
2017-09-24 10:43:52 ----A---- C:\Windows\system32\vulkan-1.dll
2017-09-24 10:43:34 ----A---- C:\Windows\NvContainerRecovery.bat
2017-09-24 10:41:44 ----D---- C:\ProgramData\Package Cache
2017-09-24 10:41:30 ----A---- C:\Windows\system32\drivers\nvvhci.sys
2017-09-24 10:41:24 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2017-09-24 10:41:22 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2017-09-24 10:41:22 ----A---- C:\Windows\system32\nvaudcap64v.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2017-09-24 10:41:21 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvopencl.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvoglv64.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\NvIFR64.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\NvFBC64.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvdispgenco6438165.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvdispco6438165.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvcuvid.dll
2017-09-24 10:41:21 ----A---- C:\Windows\system32\nvcuda.dll
2017-09-24 10:41:20 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2017-09-24 10:41:20 ----A---- C:\Windows\system32\nvcompiler.dll
2017-09-24 10:38:35 ----D---- C:\NVIDIA
2017-09-24 10:32:08 ----D---- C:\ProgramData\Microsoft OneDrive
2017-09-24 10:21:50 ----AD---- C:\Program Files\Microsoft Office
2017-09-24 10:21:49 ----D---- C:\Program Files\Microsoft Office 15
2017-09-24 10:12:26 ----D---- C:\Users\Roland\AppData\Roaming\AIMP3
2017-09-24 10:12:25 ----D---- C:\Program Files (x86)\AIMP3
2017-09-24 10:11:15 ----D---- C:\Users\Roland\AppData\Roaming\WinRAR
2017-09-24 10:10:34 ----AD---- C:\Program Files\WinRAR
2017-09-24 10:03:33 ----D---- C:\Users\Roland\AppData\Roaming\uTorrent
2017-09-24 10:02:19 ----AD---- C:\Program Files\MPC-HC
2017-09-24 08:36:21 ----D---- C:\ProgramData\ASUS Smart Gesture
2017-09-24 08:25:43 ----A---- C:\Windows\system32\drivers\zorloozdacks_x64.sys
2017-09-24 08:25:43 ----A---- C:\Windows\system32\drivers\zorloozdac_x64.sys
2017-09-24 08:25:37 ----D---- C:\Program Files\Zorloo
2017-09-24 08:20:51 ----D---- C:\Windows\system32\MRT
2017-09-24 08:20:38 ----AC---- C:\Windows\system32\MRT.exe
2017-09-24 08:15:38 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-09-24 08:15:32 ----D---- C:\ProgramData\NVIDIA
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nvsvcr.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nvsvc64.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nvshext.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nvmctray.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nvcpl.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nv3dappshextr.dll
2017-09-24 08:15:27 ----A---- C:\Windows\system32\nv3dappshext.dll
2017-09-24 08:14:51 ----D---- C:\ProgramData\NVIDIA Corporation
2017-09-24 08:14:47 ----D---- C:\Program Files\NVIDIA Corporation
2017-09-24 08:13:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-09-24 08:13:09 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2017-09-24 08:13:09 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msrepl40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msrd3x40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msrd2x40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msjtes40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msjetoledb40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\msjet40.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2017-09-24 08:13:08 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2017-09-24 08:13:07 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2017-09-24 08:13:07 ----A---- C:\Windows\SYSWOW64\Windows.StateRepository.dll
2017-09-24 08:13:07 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-09-24 08:13:07 ----A---- C:\Windows\system32\mssrch.dll
2017-09-24 08:13:06 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2017-09-24 08:13:06 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2017-09-24 08:13:06 ----A---- C:\Windows\system32\tquery.dll
2017-09-24 08:13:05 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2017-09-24 08:13:05 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2017-09-24 08:13:05 ----A---- C:\Windows\SYSWOW64\InputService.dll
2017-09-24 08:13:05 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2017-09-24 08:13:05 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2017-09-24 08:13:04 ----A---- C:\Windows\SYSWOW64\winmde.dll
2017-09-24 08:13:04 ----A---- C:\Windows\SYSWOW64\twinui.dll
2017-09-24 08:13:04 ----A---- C:\Windows\SYSWOW64\MapRouter.dll
2017-09-24 08:13:04 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2017-09-24 08:13:03 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-09-24 08:13:03 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-09-24 08:13:03 ----A---- C:\Windows\SYSWOW64\mos.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\SRH.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\msxbde40.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\mstext40.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\mspbde40.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\msltus40.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2017-09-24 08:13:02 ----A---- C:\Windows\SYSWOW64\MapGeocoder.dll
2017-09-24 08:13:01 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-09-24 08:13:01 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-09-24 08:13:01 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-09-24 08:13:01 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2017-09-24 08:13:01 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\combase.dll
2017-09-24 08:13:00 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2017-09-24 08:12:59 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2017-09-24 08:12:59 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2017-09-24 08:12:59 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-09-24 08:12:59 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2017-09-24 08:12:59 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2017-09-24 08:12:58 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2017-09-24 08:12:58 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2017-09-24 08:12:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-09-24 08:12:58 ----A---- C:\Windows\SYSWOW64\explorer.exe
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\quartz.dll
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\MSAudDecMFT.dll
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\mmgaserver.exe
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2017-09-24 08:12:57 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\webservices.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2017-09-24 08:12:56 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2017-09-24 08:12:56 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\wdc.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\GamePanel.exe
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\DeviceFlows.DataModel.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2017-09-24 08:12:55 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2017-09-24 08:12:55 ----A---- C:\Windows\system32\drivers\acpi.sys
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\MSVPXENC.dll
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\autochk.exe
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2017-09-24 08:12:54 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2017-09-24 08:12:54 ----A---- C:\Windows\system32\SecurityHealthService.exe
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\scksp.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\DolbyDecMFT.dll
2017-09-24 08:12:53 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2017-09-24 08:12:53 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\Windows.Payments.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Midi.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\SensorsApi.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\mswdat10.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\msjter40.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\mfds.dll
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\InstallAgentUserBroker.exe
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2017-09-24 08:12:52 ----A---- C:\Windows\SYSWOW64\CredentialUIBroker.exe
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\PCPKsp.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\devicengccredprov.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\daxexec.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\AppxPackaging.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\aepic.dll
2017-09-24 08:12:51 ----A---- C:\Windows\SYSWOW64\ActivationManager.dll
2017-09-24 08:12:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-09-24 08:12:50 ----A---- C:\Windows\SYSWOW64\wevtapi.dll
2017-09-24 08:12:50 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2017-09-24 08:12:50 ----A---- C:\Windows\SYSWOW64\certutil.exe
2017-09-24 08:12:50 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2017-09-24 08:12:50 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2017-09-24 08:12:50 ----A---- C:\Windows\system32\drivers\tpm.sys
2017-09-24 08:12:50 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\untfs.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\PackageStateRoaming.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\msvproc.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\mspaint.exe
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\DictationManager.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\dataclen.dll
2017-09-24 08:12:49 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\wer.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\ncryptprov.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\MessagingDataModel2.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2017-09-24 08:12:48 ----A---- C:\Windows\SYSWOW64\AboveLockAppHost.dll
2017-09-24 08:12:48 ----A---- C:\Windows\system32\drivers\storahci.sys
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\Windows.Web.Diagnostics.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\tdh.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\smartscreenps.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\mfsensorgroup.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\Clipc.dll
2017-09-24 08:12:47 ----A---- C:\Windows\SYSWOW64\BluetoothApis.dll
2017-09-24 08:12:47 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-09-24 08:12:47 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\WiFiDisplay.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\TpmCoreProvisioning.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\NPSM.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\cryptngc.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\capauthz.dll
2017-09-24 08:12:46 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\wininitext.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\wincredui.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\VCardParser.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\ShareHost.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\rasapi32.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\msIso.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\IpNatHlpClient.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2017-09-24 08:12:45 ----A---- C:\Windows\SYSWOW64\dmcmnutils.dll
2017-09-24 08:12:45 ----A---- C:\Windows\system32\drivers\netvsc.sys
2017-09-24 08:12:45 ----A---- C:\Windows\system32\cmintegrator.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\WerFault.exe
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\TokenBrokerUI.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\RstrtMgr.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\qasf.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\offreg.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\dinput8.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\cmintegrator.dll
2017-09-24 08:12:44 ----A---- C:\Windows\SYSWOW64\ClipboardServer.dll
2017-09-24 08:12:44 ----A---- C:\Windows\system32\XblGameSaveExt.dll
2017-09-24 08:12:44 ----A---- C:\Windows\system32\drivers\sdbus.sys
2017-09-24 08:12:44 ----A---- C:\Windows\system32\drivers\hidbth.sys
2017-09-24 08:12:44 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\VEEventDispatcher.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\dcomp.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostUser.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostCommon.dll
2017-09-24 08:12:43 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2017-09-24 08:12:43 ----A---- C:\Windows\system32\nshwfp.dll
2017-09-24 08:12:43 ----A---- C:\Windows\system32\drivers\bthhfenum.sys
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\xboxgipsynthetic.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\werui.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\tbs.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\rasgcw.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2017-09-24 08:12:42 ----A---- C:\Windows\SYSWOW64\AppResolver.dll
2017-09-24 08:12:42 ----A---- C:\Windows\system32\SecurityHealthSSO.dll
2017-09-24 08:12:42 ----A---- C:\Windows\system32\drivers\usbser.sys
2017-09-24 08:12:42 ----A---- C:\Windows\system32\BthHFSrv.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\Windows.System.Launcher.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\win32u.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\msacm32.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\dsreg.dll
2017-09-24 08:12:41 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\srpapi.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\sendmail.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\rasdlg.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\ngccredprov.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\mfmjpegdec.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\CloudBackupSettings.dll
2017-09-24 08:12:40 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2017-09-24 08:12:40 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2017-09-24 08:12:40 ----A---- C:\Windows\system32\drivers\bthpan.sys
2017-09-24 08:12:40 ----A---- C:\Windows\system32\drivers\BasicRender.sys
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\wisp.dll
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\themeui.dll
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\sscore.dll
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2017-09-24 08:12:39 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2017-09-24 08:12:39 ----A---- C:\Windows\system32\drivers\xboxgip.sys
2017-09-24 08:12:38 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2017-09-24 08:12:38 ----A---- C:\Windows\SYSWOW64\rasplap.dll
2017-09-24 08:12:38 ----A---- C:\Windows\SYSWOW64\msctfuimanager.dll
2017-09-24 08:12:37 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2017-09-24 08:12:37 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2017-09-24 08:12:37 ----A---- C:\Windows\SYSWOW64\tokenbinding.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\Windows.System.Profile.RetailInfo.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\win32k.sys
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\rastls.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\rasman.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\AzureSettingSyncProvider.dll
2017-09-24 08:12:36 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2017-09-24 08:12:36 ----A---- C:\Windows\system32\Windows.Gaming.Preview.dll
2017-09-24 08:12:36 ----A---- C:\Windows\system32\drivers\buttonconverter.sys
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\Phoneutil.dll
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\InputSwitch.dll
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\DWWIN.EXE
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\dinput.dll
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\authz.dll
2017-09-24 08:12:35 ----A---- C:\Windows\SYSWOW64\aadtb.dll
2017-09-24 08:12:35 ----A---- C:\Windows\system32\mssprxy.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\VAN.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\NPSMDesktopProvider.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2017-09-24 08:12:34 ----A---- C:\Windows\SYSWOW64\cldapi.dll
2017-09-24 08:12:33 ----A---- C:\Windows\SYSWOW64\XpsDocumentTargetPrint.dll
2017-09-24 08:12:33 ----A---- C:\Windows\SYSWOW64\rastlsext.dll
2017-09-24 08:12:33 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Vpn.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\tzres.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\raschap.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\edputil.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\credprovhost.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\certca.dll
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2017-09-24 08:12:32 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-09-24 08:12:32 ----A---- C:\Windows\system32\Windows.Networking.Vpn.dll
2017-09-24 08:12:32 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2017-09-24 08:12:31 ----A---- C:\Windows\SYSWOW64\ntprint.exe
2017-09-24 08:12:31 ----A---- C:\Windows\SYSWOW64\eapprovp.dll
2017-09-24 08:12:25 ----A---- C:\Windows\system32\winmde.dll
2017-09-24 08:12:24 ----A---- C:\Windows\system32\LicenseManager.dll
2017-09-24 08:12:24 ----A---- C:\Windows\system32\diagtrack.dll
2017-09-24 08:12:23 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-09-24 08:12:23 ----A---- C:\Windows\system32\Unistore.dll
2017-09-24 08:12:22 ----A---- C:\Windows\system32\tileobjserver.dll
2017-09-24 08:12:22 ----A---- C:\Windows\system32\StoreAgent.dll
2017-09-24 08:12:21 ----A---- C:\Windows\system32\wbiosrvc.dll
2017-09-24 08:12:21 ----A---- C:\Windows\system32\ngcsvc.dll
2017-09-24 08:12:21 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2017-09-24 08:12:21 ----A---- C:\Windows\system32\mstscax.dll
2017-09-24 08:12:21 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-09-24 08:12:20 ----A---- C:\Windows\system32\TDLMigration.dll
2017-09-24 08:12:20 ----A---- C:\Windows\system32\SpeechPal.dll
2017-09-24 08:12:20 ----A---- C:\Windows\system32\MusNotification.exe
2017-09-24 08:12:20 ----A---- C:\Windows\system32\InstallAgentUserBroker.exe
2017-09-24 08:12:20 ----A---- C:\Windows\system32\InstallAgent.exe
2017-09-24 08:12:20 ----A---- C:\Windows\system32\drivers\srv.sys
2017-09-24 08:12:19 ----A---- C:\Windows\system32\VEStoreEventHandlers.dll
2017-09-24 08:12:19 ----A---- C:\Windows\system32\NgcCtnrSvc.dll
2017-09-24 08:12:19 ----A---- C:\Windows\system32\NgcCtnr.dll
2017-09-24 08:12:19 ----A---- C:\Windows\system32\MusNotificationUx.exe
2017-09-24 08:12:19 ----A---- C:\Windows\system32\cryptngc.dll
2017-09-24 08:12:18 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2017-09-24 08:12:18 ----A---- C:\Windows\system32\WWAHost.exe
2017-09-24 08:12:18 ----A---- C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-09-24 08:12:18 ----A---- C:\Windows\system32\WinBioDataModel.dll
2017-09-24 08:12:18 ----A---- C:\Windows\system32\drivers\tdx.sys
2017-09-24 08:12:17 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2017-09-24 08:12:17 ----A---- C:\Windows\system32\musdialoghandlers.dll
2017-09-24 08:12:17 ----A---- C:\Windows\system32\drivers\UcmCx.sys
2017-09-24 08:12:17 ----A---- C:\Windows\system32\drivers\storport.sys
2017-09-24 08:12:16 ----A---- C:\Windows\system32\wmpmde.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\VCardParser.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\ucrtbase.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\storewuauth.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\Phoneutil.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\ngccredprov.dll
2017-09-24 08:12:16 ----A---- C:\Windows\system32\MusNotifyIcon.exe
2017-09-24 08:12:15 ----A---- C:\Windows\system32\utcutil.dll
2017-09-24 08:12:15 ----A---- C:\Windows\system32\drivers\UcmUcsi.sys
2017-09-24 08:12:09 ----A---- C:\Windows\system32\WinBioDataModelOOBE.exe
2017-09-24 08:12:09 ----A---- C:\Windows\system32\TSWorkspace.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\StorSvc.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\SensorService.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\NotificationObjFactory.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\ngcrecovery.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\ngcpopkeysrv.dll
2017-09-24 08:12:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-09-24 08:12:08 ----A---- C:\Windows\system32\edgehtml.dll
2017-09-24 08:12:07 ----A---- C:\Windows\system32\mshtml.dll
2017-09-24 08:12:06 ----A---- C:\Windows\system32\Windows.Media.dll
2017-09-24 08:12:05 ----A---- C:\Windows\system32\MFMediaEngine.dll
2017-09-24 08:12:05 ----A---- C:\Windows\system32\BingMaps.dll
2017-09-24 08:12:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-09-24 08:12:04 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2017-09-24 08:12:04 ----A---- C:\Windows\system32\Chakra.dll
2017-09-24 08:12:03 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-09-24 08:12:02 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-09-24 08:12:02 ----A---- C:\Windows\system32\wpncore.dll
2017-09-24 08:12:02 ----A---- C:\Windows\system32\InputService.dll
2017-09-24 08:12:01 ----A---- C:\Windows\system32\mos.dll
2017-09-24 08:12:01 ----A---- C:\Windows\system32\mfsvr.dll
2017-09-24 08:12:01 ----A---- C:\Windows\system32\jscript9.dll
2017-09-24 08:12:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-09-24 08:12:00 ----A---- C:\Windows\system32\mfplat.dll
2017-09-24 08:12:00 ----A---- C:\Windows\system32\mfcore.dll
2017-09-24 08:12:00 ----A---- C:\Windows\system32\MbaeApi.dll
2017-09-24 08:12:00 ----A---- C:\Windows\system32\MapsStore.dll
2017-09-24 08:12:00 ----A---- C:\Windows\system32\MapGeocoder.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\wpnapps.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\Windows.Payments.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\vbscript.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\SensorsApi.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\oleaut32.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\MSAudDecMFT.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\mfds.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\MapRouter.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\localspl.dll
2017-09-24 08:11:59 ----A---- C:\Windows\system32\KernelBase.dll
2017-09-24 08:11:58 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2017-09-24 08:11:58 ----A---- C:\Windows\system32\XpsPrint.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\win32spl.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\sensrsvc.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\nettrace.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\msvproc.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\ieproxy.dll
2017-09-24 08:11:58 ----A---- C:\Windows\system32\devicengccredprov.dll
2017-09-24 08:11:57 ----A---- C:\Windows\system32\WindowsCodecsRaw.dll
2017-09-24 08:11:57 ----A---- C:\Windows\system32\TextInputFramework.dll
2017-09-24 08:11:57 ----A---- C:\Windows\system32\MSVPXENC.dll
2017-09-24 08:11:56 ----A---- C:\Windows\SYSWOW64\WindowsCodecsRaw.dll
2017-09-24 08:11:56 ----A---- C:\Windows\system32\drivers\ndis.sys
2017-09-24 08:11:56 ----A---- C:\Windows\system32\drivers\bridge.sys
2017-09-24 08:11:55 ----A---- C:\Windows\SYSWOW64\webplatstorageserver.dll
2017-09-24 08:11:55 ----A---- C:\Windows\system32\rasgcw.dll
2017-09-24 08:11:55 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2017-09-24 08:11:55 ----A---- C:\Windows\system32\NPSM.dll
2017-09-24 08:11:55 ----A---- C:\Windows\system32\ISM.dll
2017-09-24 08:11:55 ----A---- C:\Windows\system32\drivers\pdc.sys
2017-09-24 08:11:55 ----A---- C:\Windows\system32\drivers\netio.sys
2017-09-24 08:11:54 ----A---- C:\Windows\system32\wmpps.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\Windows.Media.Streaming.ps.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\offreg.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\MSVideoDSP.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\mfps.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\ieapfltr.dll
2017-09-24 08:11:54 ----A---- C:\Windows\system32\drivers\afd.sys
2017-09-24 08:11:53 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2017-09-24 08:11:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-09-24 08:11:53 ----A---- C:\Windows\system32\rdpudd.dll
2017-09-24 08:11:53 ----A---- C:\Windows\system32\rasplap.dll
2017-09-24 08:11:53 ----A---- C:\Windows\system32\rasdlg.dll
2017-09-24 08:11:53 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2017-09-24 08:11:53 ----A---- C:\Windows\system32\ntprint.dll
2017-09-24 08:11:53 ----A---- C:\Windows\system32\lsass.exe
2017-09-24 08:11:53 ----A---- C:\Windows\system32\drivers\nsiproxy.sys
2017-09-24 08:11:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-09-24 08:11:52 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\wpnprv.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\prntvpt.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\PlayToReceiver.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\ieui.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\Chakradiag.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\dxtrans.dll
2017-09-24 08:11:47 ----A---- C:\Windows\system32\drivers\rootmdm.sys
2017-09-24 08:11:46 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-09-24 08:11:46 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2017-09-24 08:11:46 ----A---- C:\Windows\system32\snmptrap.exe
2017-09-24 08:11:46 ----A---- C:\Windows\system32\mshtmled.dll
2017-09-24 08:11:46 ----A---- C:\Windows\system32\iepeers.dll
2017-09-24 08:11:45 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2017-09-24 08:11:45 ----A---- C:\Windows\system32\spoolsv.exe
2017-09-24 08:11:45 ----A---- C:\Windows\system32\SEMgrPS.dll
2017-09-24 08:11:45 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-09-24 08:11:45 ----A---- C:\Windows\system32\jscript9diag.dll
2017-09-24 08:11:44 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-09-24 08:11:44 ----A---- C:\Windows\system32\wpnpinst.exe
2017-09-24 08:11:44 ----A---- C:\Windows\system32\webplatstorageserver.dll
2017-09-24 08:11:44 ----A---- C:\Windows\system32\rastlsext.dll
2017-09-24 08:11:44 ----A---- C:\Windows\system32\ntprint.exe
2017-09-24 08:11:44 ----A---- C:\Windows\system32\inetpp.dll
2017-09-24 08:11:43 ----A---- C:\Windows\system32\Windows.StateRepository.dll
2017-09-24 08:11:43 ----A---- C:\Windows\system32\ieframe.dll
2017-09-24 08:11:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-09-24 08:11:42 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-09-24 08:11:42 ----A---- C:\Windows\system32\DWrite.dll
2017-09-24 08:11:41 ----A---- C:\Windows\system32\d2d1.dll
2017-09-24 08:11:40 ----A---- C:\Windows\system32\workfolderssvc.dll
2017-09-24 08:11:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-09-24 08:11:40 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-09-24 08:11:39 ----A---- C:\Windows\system32\WindowsCodecs.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\ole32.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\FntCache.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\dbghelp.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\CoreUIComponents.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\comsvcs.dll
2017-09-24 08:11:39 ----A---- C:\Windows\system32\bisrv.dll
2017-09-24 08:11:38 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-09-24 08:11:38 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-09-24 08:11:38 ----A---- C:\Windows\system32\mmgaserver.exe
2017-09-24 08:11:38 ----A---- C:\Windows\system32\AppReadiness.dll
2017-09-24 08:11:37 ----A---- C:\Windows\system32\drivers\http.sys
2017-09-24 08:11:37 ----A---- C:\Windows\system32\DolbyDecMFT.dll
2017-09-24 08:11:37 ----A---- C:\Windows\system32\d3d10warp.dll
2017-09-24 08:11:37 ----A---- C:\Windows\system32\ActivationManager.dll
2017-09-24 08:11:37 ----A---- C:\Windows\HelpPane.exe
2017-09-24 08:11:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\winresume.exe
2017-09-24 08:11:36 ----A---- C:\Windows\system32\winload.exe
2017-09-24 08:11:36 ----A---- C:\Windows\system32\wer.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\services.exe
2017-09-24 08:11:36 ----A---- C:\Windows\system32\psmsrv.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\ntdll.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\HoloSI.PCShell.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2017-09-24 08:11:36 ----A---- C:\Windows\system32\ConhostV2.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\wc_storage.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\msfeeds.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\hal.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\drivers\wcifs.sys
2017-09-24 08:11:35 ----A---- C:\Windows\system32\drivers\clfs.sys
2017-09-24 08:11:35 ----A---- C:\Windows\system32\dbgeng.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\browserbroker.dll
2017-09-24 08:11:35 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\WerFault.exe
2017-09-24 08:11:34 ----A---- C:\Windows\system32\RjvMDMConfig.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\msxml3.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\MessagingDataModel2.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\LocationFramework.dll
2017-09-24 08:11:34 ----A---- C:\Windows\system32\DmApiSetExtImplDesktop.dll
2017-09-24 08:11:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\WpAXHolder.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\wermgr.exe
2017-09-24 08:11:33 ----A---- C:\Windows\system32\MDMAppInstaller.exe
2017-09-24 08:11:33 ----A---- C:\Windows\system32\imagehlp.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\FlightSettings.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\Faultrep.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\drivers\tm.sys
2017-09-24 08:11:33 ----A---- C:\Windows\system32\drivers\partmgr.sys
2017-09-24 08:11:33 ----A---- C:\Windows\system32\drivers\netbt.sys
2017-09-24 08:11:33 ----A---- C:\Windows\system32\dnsrslvr.dll
2017-09-24 08:11:33 ----A---- C:\Windows\system32\csrsrv.dll
2017-09-24 08:11:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-09-24 08:11:32 ----A---- C:\Windows\SYSWOW64\bcd.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\wudriver.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\WerFaultSecure.exe
2017-09-24 08:11:32 ----A---- C:\Windows\system32\mfmjpegdec.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\iedkcs32.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\ie4uinit.exe
2017-09-24 08:11:32 ----A---- C:\Windows\system32\dxgi.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\datamarketsvc.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\browser_broker.exe
2017-09-24 08:11:32 ----A---- C:\Windows\system32\bcd.dll
2017-09-24 08:11:32 ----A---- C:\Windows\system32\asycfilt.dll
2017-09-24 08:11:31 ----A---- C:\Windows\system32\catsrvps.dll
2017-09-24 08:11:30 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-09-24 08:11:30 ----A---- C:\Windows\system32\wersvc.dll
2017-09-24 08:11:30 ----A---- C:\Windows\system32\webcheck.dll
2017-09-24 08:11:30 ----A---- C:\Windows\system32\Narrator.exe
2017-09-24 08:11:29 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-09-24 08:11:29 ----A---- C:\Windows\system32\odbcconf.dll
2017-09-24 08:11:28 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2017-09-24 08:11:26 ----A---- C:\Windows\system32\shell32.dll
2017-09-24 08:11:25 ----A---- C:\Windows\system32\windows.storage.dll
2017-09-24 08:11:25 ----A---- C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-09-24 08:11:24 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2017-09-24 08:11:24 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2017-09-24 08:11:24 ----A---- C:\Windows\system32\twinui.dll
2017-09-24 08:11:23 ----A---- C:\Windows\system32\ExplorerFrame.dll
2017-09-24 08:11:23 ----A---- C:\Windows\system32\dwmcore.dll
2017-09-24 08:11:23 ----A---- C:\Windows\system32\CertEnroll.dll
2017-09-24 08:11:22 ----A---- C:\Windows\system32\twinapi.appcore.dll
2017-09-24 08:11:22 ----A---- C:\Windows\system32\SRH.dll
2017-09-24 08:11:22 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\StartTileData.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\smartscreen.exe
2017-09-24 08:11:21 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\msftedit.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\dosvc.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\combase.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\audiosrv.dll
2017-09-24 08:11:21 ----A---- C:\Windows\system32\appraiser.dll
2017-09-24 08:11:20 ----A---- C:\Windows\system32\Windows.CloudStore.dll
2017-09-24 08:11:20 ----A---- C:\Windows\system32\win32kfull.sys
2017-09-24 08:11:20 ----A---- C:\Windows\system32\sppobjs.dll
2017-09-24 08:11:20 ----A---- C:\Windows\system32\ResetEngine.dll
2017-09-24 08:11:20 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\Windows.UI.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\SettingSyncCore.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\lpasvc.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\DeviceFlows.DataModel.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\AudioSes.dll
2017-09-24 08:11:19 ----A---- C:\Windows\system32\aeinv.dll
2017-09-24 08:11:19 ----A---- C:\Windows\explorer.exe
2017-09-24 08:11:18 ----A---- C:\Windows\system32\XblAuthManager.dll
2017-09-24 08:11:18 ----A---- C:\Windows\system32\wlidsvc.dll
2017-09-24 08:11:18 ----A---- C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-09-24 08:11:18 ----A---- C:\Windows\system32\MPSSVC.dll
2017-09-24 08:11:18 ----A---- C:\Windows\system32\iertutil.dll
2017-09-24 08:11:18 ----A---- C:\Windows\system32\AudioEng.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\wuaueng.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\Windows.ApplicationModel.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\win32kbase.sys
2017-09-24 08:11:17 ----A---- C:\Windows\system32\quartz.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\OpcServices.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\LogonController.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\gdi32full.dll
2017-09-24 08:11:17 ----A---- C:\Windows\system32\efscore.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\twinui.pcshell.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\TokenBroker.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\SettingSyncHost.exe
2017-09-24 08:11:16 ----A---- C:\Windows\system32\ReAgent.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\mspaint.exe
2017-09-24 08:11:16 ----A---- C:\Windows\system32\msctf.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\FrameServer.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\devinv.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\crypt32.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2017-09-24 08:11:16 ----A---- C:\Windows\system32\audiodg.exe
2017-09-24 08:11:16 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\Windows.Shell.BlueLightReduction.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\wevtsvc.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\wdc.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\urlmon.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\UIAutomationCore.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\sysmain.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\SettingsHandlers_Display.dll
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#2 Příspěvek od rolas »

Pokračování logu.

2017-09-24 08:11:15 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-09-24 08:11:15 ----A---- C:\Windows\system32\ClipSVC.dll
2017-09-24 08:11:15 ----A---- C:\Windows\system32\autochk.exe
2017-09-24 08:11:14 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\SettingsHandlers_Notifications.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\generaltel.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\enterprisecsps.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\drivers\bthport.sys
2017-09-24 08:11:14 ----A---- C:\Windows\system32\comdlg32.dll
2017-09-24 08:11:14 ----A---- C:\Windows\system32\autofmt.exe
2017-09-24 08:11:14 ----A---- C:\Windows\system32\autoconv.exe
2017-09-24 08:11:13 ----A---- C:\Windows\system32\wwansvc.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\wuapi.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\Windows.Devices.Midi.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\updatehandlers.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\twinui.appcore.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\scksp.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\reseteng.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\MMDevAPI.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\LockHostingFramework.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\invagent.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\drivers\WdiWiFi.sys
2017-09-24 08:11:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-09-24 08:11:13 ----A---- C:\Windows\system32\dcntel.dll
2017-09-24 08:11:13 ----A---- C:\Windows\system32\daxexec.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\wininet.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\winhttp.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\SHCore.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\rdbui.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\GdiPlus.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\DolbyHrtfEnc.dll
2017-09-24 08:11:12 ----A---- C:\Windows\system32\CloudExperienceHost.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\wpx.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\Wldap32.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\Windows.SharedPC.AccountManager.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\WFDSConMgrSvc.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\wevtapi.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\werconcpl.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\usocore.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\user32.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\provengine.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\MBR2GPT.EXE
2017-09-24 08:11:11 ----A---- C:\Windows\system32\kerberos.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\iphlpsvc.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\domgmt.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\dcomp.dll
2017-09-24 08:11:11 ----A---- C:\Windows\system32\aepic.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\winlogon.exe
2017-09-24 08:11:10 ----A---- C:\Windows\system32\wcmsvc.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\wcmcsp.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\UpdateAgent.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\TileDataRepository.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\policymanager.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\PackageStateRoaming.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\msinfo32.exe
2017-09-24 08:11:10 ----A---- C:\Windows\system32\kernel32.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\DolbyMATEnc.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\basecsp.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\atmfd.dll
2017-09-24 08:11:10 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\tpmvsc.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\smartscreenps.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\SettingsHandlers_Flights.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\rpcss.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\RDXService.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\propsys.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\PCPKsp.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\ncryptprov.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\httpprxm.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\GamePanel.exe
2017-09-24 08:11:09 ----A---- C:\Windows\system32\fontdrvhost.exe
2017-09-24 08:11:09 ----A---- C:\Windows\system32\EditionUpgradeManagerObj.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-09-24 08:11:09 ----A---- C:\Windows\system32\DictationManager.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\dataclen.dll
2017-09-24 08:11:09 ----A---- C:\Windows\system32\bcdboot.exe
2017-09-24 08:11:09 ----A---- C:\Windows\system32\aitstatic.exe
2017-09-24 08:11:09 ----A---- C:\Windows\system32\AboveLockAppHost.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\wuuhext.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\wininit.exe
2017-09-24 08:11:08 ----A---- C:\Windows\system32\uDWM.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\SharedStartModel.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\rasmans.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\modernexecserver.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\fveapi.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\embeddedmodesvc.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\EditionUpgradeHelper.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\drivers\fastfat.sys
2017-09-24 08:11:08 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-09-24 08:11:08 ----A---- C:\Windows\system32\comctl32.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\ci.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\certutil.exe
2017-09-24 08:11:08 ----A---- C:\Windows\system32\cdpsvc.dll
2017-09-24 08:11:08 ----A---- C:\Windows\system32\BootMenuUX.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\untfs.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\umpo.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\SndVolSSO.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\ShareHost.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\rasapi32.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\omadmclient.exe
2017-09-24 08:11:07 ----A---- C:\Windows\system32\officecsp.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\msIso.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\msacm32.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\lsasrv.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\CredentialUIBroker.exe
2017-09-24 08:11:07 ----A---- C:\Windows\system32\Clipc.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\ClipboardServer.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\BluetoothApis.dll
2017-09-24 08:11:07 ----A---- C:\Windows\system32\ActiveSyncCsp.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\XboxNetApiSvc.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\wisp.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\WiFiDisplay.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\TpmCoreProvisioning.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\tdh.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\SIHClient.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\SettingsEnvironment.Desktop.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\securekernel.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\ScDeviceEnum.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\rastls.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\PhoneService.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\ofdeploy.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\mfsensorgroup.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\hvix64.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\hvax64.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\dsreg.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
2017-09-24 08:11:06 ----A---- C:\Windows\system32\drivers\dam.sys
2017-09-24 08:11:06 ----A---- C:\Windows\system32\dmcmnutils.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\dinput8.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\DeviceCredentialDeployment.exe
2017-09-24 08:11:06 ----A---- C:\Windows\system32\capauthz.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2017-09-24 08:11:06 ----A---- C:\Windows\system32\acmigration.dll
2017-09-24 08:11:06 ----A---- C:\Windows\bfsvc.exe
2017-09-24 08:11:05 ----A---- C:\Windows\system32\wininitext.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\Windows.UI.AppDefaults.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\werui.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\RstrtMgr.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\RecoveryDrive.exe
2017-09-24 08:11:05 ----A---- C:\Windows\system32\RDXTaskFactory.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\qasf.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\profsvc.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\netlogon.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\msv1_0.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\LockAppBroker.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\drivers\fvevol.sys
2017-09-24 08:11:05 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2017-09-24 08:11:05 ----A---- C:\Windows\system32\DeviceCensus.exe
2017-09-24 08:11:05 ----A---- C:\Windows\system32\csplte.dll
2017-09-24 08:11:05 ----A---- C:\Windows\system32\bcdedit.exe
2017-09-24 08:11:04 ----A---- C:\Windows\system32\WindowManagement.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\wincredui.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\wercplsupport.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\TokenBrokerUI.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\tbs.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-09-24 08:11:04 ----A---- C:\Windows\system32\srvsvc.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\spbcd.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\setupapi.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\RasMediaManager.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\profsvcext.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\policymanagerprecheck.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\PhoneProviders.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\nltest.exe
2017-09-24 08:11:04 ----A---- C:\Windows\system32\hvloader.exe
2017-09-24 08:11:04 ----A---- C:\Windows\system32\fdeploy.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-09-24 08:11:04 ----A---- C:\Windows\system32\CloudExperienceHostUser.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\CloudExperienceHostCommon.dll
2017-09-24 08:11:04 ----A---- C:\Windows\system32\CloudExperienceHostBroker.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\wwanprotdim.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\wuuhosdeployment.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\winsrvext.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\Windows.System.Launcher.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\win32u.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\tokenbinding.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\themeui.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\sscore.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\srpapi.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\SmsRouterSvc.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\shlwapi.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\sendmail.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\SCardSvr.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\rasman.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\PlayToDevice.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\NPSMDesktopProvider.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\NotificationController.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\msctfuimanager.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\MrmCoreR.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\EnterpriseAPNCsp.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\drivers\vmbkmclr.sys
2017-09-24 08:11:03 ----A---- C:\Windows\system32\drivers\vmbkmcl.sys
2017-09-24 08:11:03 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-09-24 08:11:03 ----A---- C:\Windows\system32\drivers\ksthunk.sys
2017-09-24 08:11:03 ----A---- C:\Windows\system32\dmenterprisediagnostics.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\dab.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\CoreMessaging.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\coredpus.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\configmanager2.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\CloudBackupSettings.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\CfgSPCellular.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\certprop.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\AzureSettingSyncProvider.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\AppResolver.dll
2017-09-24 08:11:03 ----A---- C:\Windows\system32\appidapi.dll
2017-09-24 08:11:02 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2017-09-24 08:11:02 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\xboxgipsynthetic.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\wups.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\wsqmcons.exe
2017-09-24 08:11:02 ----A---- C:\Windows\system32\WpcWebFilter.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\WMPhoto.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\winsrv.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\win32k.sys
2017-09-24 08:11:02 ----A---- C:\Windows\system32\WFDSConMgr.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\vss_ps.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\UIRibbonRes.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\UIRibbon.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\tzres.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\TpmTasks.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\shsvcs.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\shdocvw.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\raschap.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\rascustom.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\PerceptionSimulationExtensions.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\oleacc.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\mdmregistration.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\IpNatHlpClient.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\InputSwitch.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\facecredentialprovider.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\edputil.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\eapprovp.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\DWWIN.EXE
2017-09-24 08:11:02 ----A---- C:\Windows\system32\dwmredir.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\duser.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\dui70.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\drivers\rfcomm.sys
2017-09-24 08:11:02 ----A---- C:\Windows\system32\drivers\mskssrv.sys
2017-09-24 08:11:02 ----A---- C:\Windows\system32\drivers\bthenum.sys
2017-09-24 08:11:02 ----A---- C:\Windows\system32\DMPushRouterCore.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\dmenrollengine.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\dmcsps.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\dinput.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\DevicePairing.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\DeviceEnroller.exe
2017-09-24 08:11:02 ----A---- C:\Windows\system32\CloudDomainJoinAUG.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\cldapi.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\certcli.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\certca.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\bcastdvr.exe
2017-09-24 08:11:02 ----A---- C:\Windows\system32\authz.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\atmlib.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\appinfo.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\aadtb.dll
2017-09-24 08:11:02 ----A---- C:\Windows\system32\aadcloudap.dll
2017-09-24 08:03:44 ----D---- C:\Users\Roland\AppData\Roaming\Google
2017-09-24 07:56:50 ----N---- C:\Windows\system32\MpSigStub.exe
2017-09-24 07:56:13 ----D---- C:\Program Files (x86)\ASUS
2017-09-24 07:56:09 ----D---- C:\ProgramData\SetupTPDriver
2017-09-24 07:48:15 ----D---- C:\Program Files (x86)\Google
2017-09-24 07:47:20 ----D---- C:\ProgramData\USOShared
2017-09-24 07:47:15 ----AD---- C:\Program Files (x86)\Intel
2017-09-24 07:46:59 ----A---- C:\Windows\SYSWOW64\OpenCL.DLL
2017-09-24 07:46:59 ----A---- C:\Windows\system32\OpenCL.DLL
2017-09-24 07:46:45 ----A---- C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-09-24 07:46:45 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-09-24 07:46:44 ----D---- C:\Intel
2017-09-24 07:46:36 ----D---- C:\Program Files\Intel
2017-09-24 00:00:52 ----D---- C:\Windows\InfusedApps
2017-09-23 23:59:58 ----D---- C:\Windows\Setup
2017-09-23 23:59:44 ----D---- C:\Windows\OCR
2017-09-23 23:59:44 ----D---- C:\Program Files\Windows Media Player
2017-09-23 23:59:44 ----D---- C:\Program Files (x86)\Windows Media Player
2017-09-23 23:59:13 ----A---- C:\Windows\system32\perfi005.dat
2017-09-23 23:59:13 ----A---- C:\Windows\system32\perfh005.dat
2017-09-23 23:59:13 ----A---- C:\Windows\system32\perfd005.dat
2017-09-23 23:59:13 ----A---- C:\Windows\system32\perfc005.dat
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\winrm
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\WCN
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\sysprep
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\slmgr
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\en
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\drivers\UMDF
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\drivers\cs-CZ
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\cs
2017-09-23 23:59:12 ----D---- C:\Windows\SYSWOW64\0409
2017-09-23 23:59:12 ----D---- C:\Windows\system32\winrm
2017-09-23 23:59:12 ----D---- C:\Windows\system32\WCN
2017-09-23 23:59:12 ----D---- C:\Windows\system32\slmgr
2017-09-23 23:59:12 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2017-09-23 23:59:12 ----D---- C:\Windows\system32\en
2017-09-23 23:59:10 ----D---- C:\Windows\system32\drivers\en-US
2017-09-23 23:59:10 ----D---- C:\Windows\system32\drivers\cs-CZ
2017-09-23 23:59:09 ----D---- C:\Windows\system32\cs
2017-09-23 23:59:09 ----D---- C:\Windows\system32\0409
2017-09-23 23:59:09 ----D---- C:\Windows\en-US
2017-09-23 23:59:09 ----D---- C:\Windows\DigitalLocker
2017-09-23 23:59:09 ----D---- C:\Windows\cs-CZ
2017-09-23 23:57:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-09-23 23:57:03 ----A---- C:\Windows\system32\perfi009.dat
2017-09-23 23:57:03 ----A---- C:\Windows\system32\perfh009.dat
2017-09-23 23:57:03 ----A---- C:\Windows\system32\perfd009.dat
2017-09-23 23:57:02 ----A---- C:\Windows\system32\perfc009.dat
2017-09-23 23:55:58 ----A---- C:\Windows\SYSWOW64\NOISE.DAT
2017-09-23 23:55:58 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2017-09-23 23:55:58 ----A---- C:\Windows\SYSWOW64\dssec.dat
2017-09-23 23:55:56 ----A---- C:\Windows\system32\NOISE.DAT
2017-09-23 23:55:56 ----A---- C:\Windows\system32\msclmd.dll
2017-09-23 23:55:55 ----A---- C:\Windows\system32\dssec.dat
2017-09-23 23:55:52 ----RSH---- C:\Windows\fonts\StaticCache.dat
2017-09-23 23:55:52 ----A---- C:\Windows\win.ini
2017-09-23 23:55:52 ----A---- C:\Windows\fonts\desktop.ini
2017-09-23 23:55:51 ----ASH---- C:\Program Files\desktop.ini
2017-09-23 23:55:51 ----ASH---- C:\Program Files (x86)\desktop.ini
2017-09-23 23:55:51 ----A---- C:\Windows\system.ini
2017-09-23 23:55:50 ----SHD---- C:\Windows\Installer
2017-09-23 23:55:50 ----SHD---- C:\Program Files\Windows Sidebar
2017-09-23 23:55:50 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2017-09-23 23:55:50 ----SHD---- C:\$Recycle.Bin
2017-09-23 23:55:50 ----SD---- C:\Windows\SYSWOW64\Nui
2017-09-23 23:55:50 ----SD---- C:\Windows\SYSWOW64\F12
2017-09-23 23:55:50 ----SD---- C:\Windows\SYSWOW64\DiagSvcs
2017-09-23 23:55:50 ----SD---- C:\Windows\SYSWOW64\Configuration
2017-09-23 23:55:50 ----SD---- C:\Windows\system32\Nui
2017-09-23 23:55:50 ----SD---- C:\Windows\system32\F12
2017-09-23 23:55:50 ----SD---- C:\Windows\system32\dsc
2017-09-23 23:55:50 ----SD---- C:\Windows\system32\DiagSvcs
2017-09-23 23:55:50 ----SD---- C:\Windows\system32\Configuration
2017-09-23 23:55:50 ----SD---- C:\Windows\Downloaded Program Files
2017-09-23 23:55:50 ----SD---- C:\ProgramData\Microsoft
2017-09-23 23:55:50 ----RSD---- C:\Windows\Media
2017-09-23 23:55:50 ----RSD---- C:\Windows\Fonts
2017-09-23 23:55:50 ----RSD---- C:\Windows\assembly
2017-09-23 23:55:50 ----RD---- C:\Windows\PrintDialog
2017-09-23 23:55:50 ----RD---- C:\Windows\Offline Web Pages
2017-09-23 23:55:50 ----RD---- C:\Windows\MiracastView
2017-09-23 23:55:50 ----RD---- C:\Windows\Microsoft.NET
2017-09-23 23:55:50 ----RD---- C:\Windows\ImmersiveControlPanel
2017-09-23 23:55:50 ----RD---- C:\Program Files (x86)
2017-09-23 23:55:50 ----RD---- C:\Program Files
2017-09-23 23:55:50 ----HD---- C:\Windows\ELAMBKUP
2017-09-23 23:55:50 ----HD---- C:\ProgramData
2017-09-23 23:55:50 ----HD---- C:\Program Files\WindowsApps
2017-09-23 23:55:50 ----D---- C:\Windows\Web
2017-09-23 23:55:50 ----D---- C:\Windows\Vss
2017-09-23 23:55:50 ----D---- C:\Windows\twain_32
2017-09-23 23:55:50 ----D---- C:\Windows\tracing
2017-09-23 23:55:50 ----D---- C:\Windows\Temp
2017-09-23 23:55:50 ----D---- C:\Windows\Tasks
2017-09-23 23:55:50 ----D---- C:\Windows\TAPI
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\zh-TW
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\zh-CN
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\WinMetadata
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\wbem
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\uk-UA
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\tr-TR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\th-TH
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Tasks
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sv-SE
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sru
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sr-Latn-RS
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sppui
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\spp
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Speech_OneCore
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Speech
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\SMI
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sl-SI
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\sk-SK
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\setup
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ru-RU
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ro-RO
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\restore
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Recovery
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\RasToast
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ras
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\pt-PT
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\pt-BR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\pl-PL
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\oobe
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\nl-NL
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\networklist
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\NDF
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\nb-NO
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\MUI
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\MsDtc
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\MSDRM
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\migwiz
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\migration
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\MailContactsCalendarSync
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Macromed
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\lv-LV
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\lt-LT
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\LogFiles
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Licenses
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ko-KR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ja-JP
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\it-IT
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Ipmi
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\InstallShield
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\InputMethod
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\inetsrv
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\IME
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\icsxml
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\hu-HU
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\hr-HR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\he-IL
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\GroupPolicyUsers
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\FxsTmp
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\fr-FR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\fr-CA
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\fi-FI
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\et-EE
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\es-MX
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\es-ES
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\en-US
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\en-GB
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\el-GR
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\DriverStore
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\drivers
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\downlevel
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Dism
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\de-DE
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\da-DK
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\config
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Com
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\catroot
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\Bthprops
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\bg-BG
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\ar-SA
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\AppLocker
2017-09-23 23:55:50 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2017-09-23 23:55:50 ----D---- C:\Windows\syswow64
2017-09-23 23:55:50 ----D---- C:\Windows\SystemResources
2017-09-23 23:55:50 ----D---- C:\Windows\SystemApps
2017-09-23 23:55:50 ----D---- C:\Windows\system32\zh-TW
2017-09-23 23:55:50 ----D---- C:\Windows\system32\zh-CN
2017-09-23 23:55:50 ----D---- C:\Windows\system32\WinMetadata
2017-09-23 23:55:50 ----D---- C:\Windows\system32\winevt
2017-09-23 23:55:50 ----D---- C:\Windows\system32\WindowsPowerShell
2017-09-23 23:55:50 ----D---- C:\Windows\system32\WinBioPlugIns
2017-09-23 23:55:50 ----D---- C:\Windows\system32\WinBioDatabase
2017-09-23 23:55:50 ----D---- C:\Windows\system32\WDI
2017-09-23 23:55:50 ----D---- C:\Windows\system32\wbem
2017-09-23 23:55:50 ----D---- C:\Windows\system32\uk-UA
2017-09-23 23:55:50 ----D---- C:\Windows\system32\tr-TR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\th-TH
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Tasks
2017-09-23 23:55:50 ----D---- C:\Windows\system32\SystemResetPlatform
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Sysprep
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sv-SE
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sru
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sr-Latn-RS
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sppui
2017-09-23 23:55:50 ----D---- C:\Windows\system32\spp
2017-09-23 23:55:50 ----D---- C:\Windows\system32\spool
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Speech_OneCore
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Speech
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sl-SI
2017-09-23 23:55:50 ----D---- C:\Windows\system32\sk-SK
2017-09-23 23:55:50 ----D---- C:\Windows\system32\setup
2017-09-23 23:55:50 ----D---- C:\Windows\system32\SecureBootUpdates
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ru-RU
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ro-RO
2017-09-23 23:55:50 ----D---- C:\Windows\system32\restore
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Recovery
2017-09-23 23:55:50 ----D---- C:\Windows\system32\RasToast
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ras
2017-09-23 23:55:50 ----D---- C:\Windows\system32\pt-PT
2017-09-23 23:55:50 ----D---- C:\Windows\system32\pt-BR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ProximityToast
2017-09-23 23:55:50 ----D---- C:\Windows\system32\PointOfService
2017-09-23 23:55:50 ----D---- C:\Windows\system32\pl-PL
2017-09-23 23:55:50 ----D---- C:\Windows\system32\oobe
2017-09-23 23:55:50 ----D---- C:\Windows\system32\nl-NL
2017-09-23 23:55:50 ----D---- C:\Windows\system32\networklist
2017-09-23 23:55:50 ----D---- C:\Windows\system32\NDF
2017-09-23 23:55:50 ----D---- C:\Windows\system32\nb-NO
2017-09-23 23:55:50 ----D---- C:\Windows\system32\MUI
2017-09-23 23:55:50 ----D---- C:\Windows\system32\MsDtc
2017-09-23 23:55:50 ----D---- C:\Windows\system32\MSDRM
2017-09-23 23:55:50 ----D---- C:\Windows\system32\migwiz
2017-09-23 23:55:50 ----D---- C:\Windows\system32\migration
2017-09-23 23:55:50 ----D---- C:\Windows\system32\MailContactsCalendarSync
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Macromed
2017-09-23 23:55:50 ----D---- C:\Windows\system32\lv-LV
2017-09-23 23:55:50 ----D---- C:\Windows\system32\lt-LT
2017-09-23 23:55:50 ----D---- C:\Windows\system32\LogFiles
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Licenses
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ko-KR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ja-jp
2017-09-23 23:55:50 ----D---- C:\Windows\system32\it-IT
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Ipmi
2017-09-23 23:55:50 ----D---- C:\Windows\system32\InputMethod
2017-09-23 23:55:50 ----D---- C:\Windows\system32\inetsrv
2017-09-23 23:55:50 ----D---- C:\Windows\system32\IME
2017-09-23 23:55:50 ----D---- C:\Windows\system32\icsxml
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ias
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Hydrogen
2017-09-23 23:55:50 ----D---- C:\Windows\system32\hu-HU
2017-09-23 23:55:50 ----D---- C:\Windows\system32\hr-HR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\he-IL
2017-09-23 23:55:50 ----D---- C:\Windows\system32\GroupPolicyUsers
2017-09-23 23:55:50 ----D---- C:\Windows\system32\GroupPolicy
2017-09-23 23:55:50 ----D---- C:\Windows\system32\FxsTmp
2017-09-23 23:55:50 ----D---- C:\Windows\system32\fr-FR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\fr-CA
2017-09-23 23:55:50 ----D---- C:\Windows\system32\fi-FI
2017-09-23 23:55:50 ----D---- C:\Windows\system32\et-EE
2017-09-23 23:55:50 ----D---- C:\Windows\system32\es-MX
2017-09-23 23:55:50 ----D---- C:\Windows\system32\es-ES
2017-09-23 23:55:50 ----D---- C:\Windows\system32\en-US
2017-09-23 23:55:50 ----D---- C:\Windows\system32\en-GB
2017-09-23 23:55:50 ----D---- C:\Windows\system32\el-GR
2017-09-23 23:55:50 ----D---- C:\Windows\system32\drivers\etc
2017-09-23 23:55:50 ----D---- C:\Windows\system32\downlevel
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Dism
2017-09-23 23:55:50 ----D---- C:\Windows\system32\de-DE
2017-09-23 23:55:50 ----D---- C:\Windows\system32\DDFs
2017-09-23 23:55:50 ----D---- C:\Windows\system32\da-DK
2017-09-23 23:55:50 ----D---- C:\Windows\system32\cs-CZ
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Com
2017-09-23 23:55:50 ----D---- C:\Windows\system32\CodeIntegrity
2017-09-23 23:55:50 ----D---- C:\Windows\system32\catroot2
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Bthprops
2017-09-23 23:55:50 ----D---- C:\Windows\system32\Boot
2017-09-23 23:55:50 ----D---- C:\Windows\system32\bg-BG
2017-09-23 23:55:50 ----D---- C:\Windows\system32\ar-SA
2017-09-23 23:55:50 ----D---- C:\Windows\system32\appraiser
2017-09-23 23:55:50 ----D---- C:\Windows\system32\AppLocker
2017-09-23 23:55:50 ----D---- C:\Windows\system32\AdvancedInstallers
2017-09-23 23:55:50 ----D---- C:\Windows\System
2017-09-23 23:55:50 ----D---- C:\Windows\Speech_OneCore
2017-09-23 23:55:50 ----D---- C:\Windows\Speech
2017-09-23 23:55:50 ----D---- C:\Windows\SKB
2017-09-23 23:55:50 ----D---- C:\Windows\schemas
2017-09-23 23:55:50 ----D---- C:\Windows\SchCache
2017-09-23 23:55:50 ----D---- C:\Windows\ShellExperiences
2017-09-23 23:55:50 ----D---- C:\Windows\security
2017-09-23 23:55:50 ----D---- C:\Windows\Resources
2017-09-23 23:55:50 ----D---- C:\Windows\rescache
2017-09-23 23:55:50 ----D---- C:\Windows\Registration
2017-09-23 23:55:50 ----D---- C:\Windows\Provisioning
2017-09-23 23:55:50 ----D---- C:\Windows\prefetch
2017-09-23 23:55:50 ----D---- C:\Windows\PolicyDefinitions
2017-09-23 23:55:50 ----D---- C:\Windows\PLA
2017-09-23 23:55:50 ----D---- C:\Windows\Performance
2017-09-23 23:55:50 ----D---- C:\Windows\ModemLogs
2017-09-23 23:55:50 ----D---- C:\Windows\Migration
2017-09-23 23:55:50 ----D---- C:\Windows\Logs
2017-09-23 23:55:50 ----D---- C:\Windows\LiveKernelReports
2017-09-23 23:55:50 ----D---- C:\Windows\L2Schemas
2017-09-23 23:55:50 ----D---- C:\Windows\InputMethod
2017-09-23 23:55:50 ----D---- C:\Windows\IME
2017-09-23 23:55:50 ----D---- C:\Windows\HoloShell
2017-09-23 23:55:50 ----D---- C:\Windows\Help
2017-09-23 23:55:50 ----D---- C:\Windows\Globalization
2017-09-23 23:55:50 ----D---- C:\Windows\GameBarPresenceWriter
2017-09-23 23:55:50 ----D---- C:\Windows\diagnostics
2017-09-23 23:55:50 ----D---- C:\Windows\debug
2017-09-23 23:55:50 ----D---- C:\Windows\Cursors
2017-09-23 23:55:50 ----D---- C:\Windows\Branding
2017-09-23 23:55:50 ----D---- C:\Windows\Boot
2017-09-23 23:55:50 ----D---- C:\Windows\bcastdvr
2017-09-23 23:55:50 ----D---- C:\Windows\AppReadiness
2017-09-23 23:55:50 ----D---- C:\Windows\AppPatch
2017-09-23 23:55:50 ----D---- C:\Windows\appcompat
2017-09-23 23:55:50 ----D---- C:\Windows\addins
2017-09-23 23:55:50 ----D---- C:\ProgramData\WindowsHolographicDevices
2017-09-23 23:55:50 ----D---- C:\ProgramData\USOPrivate
2017-09-23 23:55:50 ----D---- C:\ProgramData\SoftwareDistribution
2017-09-23 23:55:50 ----D---- C:\Program Files\WindowsPowerShell
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Security
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Portable Devices
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Photo Viewer
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows NT
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Multimedia Platform
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Mail
2017-09-23 23:55:50 ----D---- C:\Program Files\Windows Defender
2017-09-23 23:55:50 ----D---- C:\Program Files\Internet Explorer
2017-09-23 23:55:50 ----D---- C:\Program Files\Common Files\System
2017-09-23 23:55:50 ----D---- C:\Program Files\Common Files\Services
2017-09-23 23:55:50 ----D---- C:\Program Files\Common Files
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\WindowsPowerShell
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows Portable Devices
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows NT
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows Mail
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Windows Defender
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Internet Explorer
2017-09-23 23:55:50 ----D---- C:\Program Files (x86)\Common Files
2017-09-23 23:55:50 ----D---- C:\PerfLogs
2017-09-23 23:55:50 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-09-23 23:55:50 ----AD---- C:\Program Files\Common Files\microsoft shared
2017-09-23 23:55:38 ----D---- C:\Windows\system32\drivers\UMDF
2017-09-23 23:55:38 ----D---- C:\Windows\system32\drivers
2017-09-23 23:54:52 ----D---- C:\Windows\INF
2017-09-23 23:52:03 ----D---- C:\Windows\CbsTemp
2017-09-23 23:50:18 ----RD---- C:\Users
2017-09-23 23:50:18 ----D---- C:\Windows\WinSxS
2017-09-23 23:50:18 ----D---- C:\Windows\system32\SMI
2017-09-23 23:50:18 ----D---- C:\Windows\system32\DriverStore
2017-09-23 23:50:18 ----D---- C:\Windows\system32\config
2017-09-23 23:50:18 ----D---- C:\Windows\system32\CatRoot
2017-09-23 23:50:18 ----D---- C:\Windows\System32
2017-09-23 23:50:18 ----D---- C:\Windows\servicing
2017-09-23 23:50:18 ----D---- C:\Windows
2017-09-23 23:50:17 ----D---- C:\Windows\Panther
2017-09-23 23:16:27 ----D---- C:\Users\Roland\AppData\Roaming\Adobe
2017-09-23 23:15:57 ----SD---- C:\Users\Roland\AppData\Roaming\Microsoft
2017-09-23 23:15:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-09-23 23:12:56 ----D---- C:\Windows\SoftwareDistribution
2017-09-23 23:12:26 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2017-09-23 23:10:02 ----SHD---- C:\ProgramData\Šablony
2017-09-23 23:10:02 ----SHD---- C:\ProgramData\Plocha
2017-09-23 23:10:02 ----SHD---- C:\ProgramData\Nabídka Start
2017-09-23 23:10:02 ----SHD---- C:\ProgramData\Dokumenty
2017-09-23 23:10:02 ----SHD---- C:\ProgramData\Data aplikací
2017-09-23 23:10:02 ----SHD---- C:\Documents and Settings
2017-09-23 23:09:25 ----ASH---- C:\hiberfil.sys
2017-09-23 23:05:48 ----D---- C:\Windows\SYSWOW64\sda
2017-09-23 23:05:35 ----D---- C:\Windows\system32\DAX2
2017-09-23 23:05:26 ----D---- C:\Windows\SYSWOW64\RTCOM
2017-09-23 23:05:26 ----D---- C:\Program Files\Realtek
2017-09-23 23:04:38 ----HD---- C:\Program Files\Uninstall Information
2017-09-23 23:04:13 ----AS---- C:\Windows\bootstat.dat
2017-09-23 23:02:57 ----D---- C:\Windows\system32\SleepStudy
2017-09-23 23:02:57 ----D---- C:\Windows\ServiceProfiles
2017-09-23 23:02:52 ----SD---- C:\Windows\system32\Microsoft
2017-09-23 23:02:49 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-09-23 22:43:54 ----HD---- C:\$SysReset
2017-09-23 22:33:53 ----SHD---- C:\Recovery
2017-09-23 22:29:45 ----ASH---- C:\swapfile.sys
2017-09-23 22:29:44 ----ASH---- C:\pagefile.sys
2017-09-23 22:29:42 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======


======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2015-05-25 21816]
R0 IntelHSWPcc;IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [2015-06-09 88256]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2017-03-18 49568]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2015-05-08 20096]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2017-03-18 54272]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2017-03-18 8192]
R1 MpKsl89fd2728;MpKsl89fd2728; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BECF0B28-6FB6-4E63-87DF-C04580BB36F3}\MpKsl89fd2728.sys [2017-09-30 58120]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2017-03-18 14336]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2017-03-18 50688]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2017-03-18 79872]
R3 AsusTP;@oem14.inf,%PS2.DeviceDesc%;ASUS Input Touchpad Device; C:\Windows\System32\drivers\AsusTP.sys [2017-03-09 128024]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\drivers\BTHUSB.sys [2017-03-18 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2017-03-18 53664]
R3 HIDSwitch;@oem8.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\Windows\System32\drivers\AsRadioControl.sys [2017-05-03 31112]
R3 ibtusb;@oem26.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2017-05-19 232936]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-11-30 7969760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-11-10 4585744]
R3 MEIx64;@oem9.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-06-23 192312]
R3 NETwNb64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 8.1 64 Bit; C:\Windows\System32\drivers\Netwbw02.sys [2017-04-13 3517696]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_d5fc647520664d82\nvlddmkm.sys [2017-04-03 14841784]
R3 nvvad_WaveExtensible;@oem25.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-09-19 48064]
R3 nvvhci;@oem24.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\Windows\System32\drivers\nvvhci.sys [2017-09-19 57792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2017-03-18 604160]
R3 RTSPER;@oem0.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2015-10-13 762112]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2017-03-18 123808]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2017-03-18 103328]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2017-03-18 58784]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2017-03-18 61848]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2017-03-18 91040]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2017-03-18 36760]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2017-07-28 105472]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2017-07-28 97280]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2017-09-05 130560]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\drivers\BTHport.sys [2017-07-28 982016]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2017-09-05 39424]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2017-03-18 122880]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2017-03-18 21504]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2017-03-18 51104]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2017-03-18 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2017-03-18 526240]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 IntcDAud;@oem11.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2016-05-12 481768]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2017-03-18 842656]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2017-03-18 108960]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\Windows\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-09-19 30144]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2017-03-18 936864]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2017-08-01 180736]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\Windows\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-20 83032]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [2016-07-28 130744]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R2 CDPUserSvc_44d7df9;Uživatelská služba platformy připojených zařízení_44d7df9; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-09-08 7761608]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 ibtsiva;@oem26.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\Windows\system32\ibtsiva []
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-11-30 373728]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19 512960]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-04-01 462784]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-09-19 449984]
R2 OneSyncSvc_44d7df9;Hostitel synchronizace_44d7df9; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2017-07-07 336320]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2017-03-18 47664]
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-11-30 301536]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc_44d7df9;Tok zařízení_44d7df9; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService_44d7df9;Služba zasílání zpráv_44d7df9; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19 512960]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-08 260296]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc_44d7df9;Data kontaktů_44d7df9; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2017-03-18 1284608]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2017-03-18 47664]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\Windows\system32\spectrum.exe [2017-03-18 891904]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2017-03-18 302592]
S4 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\Windows\System32\svchost.exe [2017-03-18 47664]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2017-03-18 47664]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119670
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Napíchnutý PC

#3 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#4 Příspěvek od rolas »

Zde je log.

# AdwCleaner 7.0.3.1 - Logfile created on Sat Sep 30 17:35:10 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy, Startpage found: http://search.gboxapp.com/

/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271


*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119670
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Napíchnutý PC

#5 Příspěvek od Rudy »

Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#6 Příspěvek od rolas »

Zde zasílám logy, které jsem oba zabalil do raru z důvodu, že je nejde poslat. Jinak ohledně ntb, tak to vypadá, že notebook si ze mě spíše vystřelil s tou tapetou, protože se jednalo o obrázky, které jsem zálohoval, nicméně fcb, email jsem řešil zabezpečením pomocí SMS, takže možná nakonec je vše v pořádku, nicméně za případnou kontrolu logu budu rád.
Přílohy
FRST.rar
(22.5 KiB) Staženo 58 x
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#7 Příspěvek od rolas »

Zde přikládám addition.
Přílohy
Addition.rar
(9.76 KiB) Staženo 55 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119670
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Napíchnutý PC

#8 Příspěvek od Rudy »

Lituji, ale hlásí mi to poškozený archiv.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#9 Příspěvek od rolas »

Snad teď už Vám to půjde.
Přílohy
FRST.rar
(22.71 KiB) Staženo 63 x
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#10 Příspěvek od rolas »

Addition
Přílohy
Addition.rar
(9.68 KiB) Staženo 56 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119670
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Napíchnutý PC

#11 Příspěvek od Rudy »

Jj, teď je to OK. Otevřte poznámkový blok a zkopírujte do něj:
Start
CHR StartupUrls: Default -> "hxxp://search.gboxapp.com/","hxxps://encrypted.google.com"
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\ProgramData\DP45977C.lfl
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncApi64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers4_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers5_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
Task: {3393EDCD-D7FB-46CA-8E89-64EB03BF52F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24] (Google Inc.)
Task: {A29DD27B-AE72-4895-80E8-16EEAFB403E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24] (Google Inc.)
C:\Users\Roland\AppData\Local\Temp

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
rolas
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 10 lis 2008 16:51

Re: Napíchnutý PC

#12 Příspěvek od rolas »

Zde zasílám log.

Fix result of Farbar Recovery Scan Tool (x64) Version: 02-10-2017 01
Ran by Roland (03-10-2017 21:25:11) Run:1
Running from C:\Users\Roland\Desktop
Loaded Profiles: Roland (Available Profiles: Roland)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CHR StartupUrls: Default -> "hxxp://search.gboxapp.com/","hxxps://encrypted.google.com"
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\ProgramData\DP45977C.lfl
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncApi64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers4_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
ContextMenuHandlers5_S-1-5-21-2824725374-3021674458-3359391723-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Roland\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileSyncShell64.dll -> No File
Task: {3393EDCD-D7FB-46CA-8E89-64EB03BF52F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24] (Google Inc.)
Task: {A29DD27B-AE72-4895-80E8-16EEAFB403E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-24] (Google Inc.)
C:\Users\Roland\AppData\Local\Temp

EmptyTemp:
End
*****************

Chrome StartupUrls => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458} => key removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => key removed successfully
HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => key removed successfully
HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => key removed successfully
HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => key removed successfully
HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => key removed successfully
HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => key removed successfully
HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => key removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => key not found.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => key removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found.
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => key not found.
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => key not found.
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ FileSyncEx => key removed successfully
HKU\S-1-5-21-2824725374-3021674458-3359391723-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3393EDCD-D7FB-46CA-8E89-64EB03BF52F1} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3393EDCD-D7FB-46CA-8E89-64EB03BF52F1} => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A29DD27B-AE72-4895-80E8-16EEAFB403E6} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A29DD27B-AE72-4895-80E8-16EEAFB403E6} => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key removed successfully

"C:\Users\Roland\AppData\Local\Temp" folder move:

Could not move "C:\Users\Roland\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20287303 B
Java, Flash, Steam htmlcache => 343 B
Windows/system/drivers => 2921606 B
Edge => 1036561 B
Chrome => 767824707 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 26342 B
Roland => 218133977 B

RecycleBin => 18773 B
EmptyTemp: => 969.7 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 03-10-2017 21:30:18)

C:\Users\Roland\AppData\Local\Temp => moved successfully

==== End of Fixlog 21:30:23 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119670
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Napíchnutý PC

#13 Příspěvek od Rudy »

Smazáno. Log by již měl být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“