
byl bych moc vděčný, kdyby se mi někdo podíval na můj log. Poslední dobou mám pocit, že je problém s načítáním stránek a dlouho to trvá, občas i hodí error a můsím dát refresh. Díky za pomoc!
Logfile of random's system information tool 1.10 (written by random/random)
Run by szmil at 2019-02-26 21:31:37
Microsoft Windows 10 Pro
System drive C: has 152 GB (66%) free of 231 GB
Total RAM: 8000 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:31:41, on 26.02.2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal
Running processes:
C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.11231.20174.0_x86__8wekyb3d8bbwe\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\SDXHelperBgt.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.1.30.0_x64__htrsf667h5kn2\win32\SupportAssistAppWire.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\trend micro\szmil.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell17win10.msn.com/?pc=DCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Foxit PhantomPDF Create PDF ToolBar Helper - {A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A} - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll
O3 - Toolbar: Foxit PhantomPDF Create PDF ToolBar - {BFD9D8A8-57FF-488A-B919-065EC77CF82F} - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll
O4 - HKCU\..\Run: [OneDrive] "C:\Users\szmil\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - Global Startup: Dell Display Manager.lnk = C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
O8 - Extra context menu item: Append Link Page to Another PDF - res://C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuLinkAppendPDF.html
O8 - Extra context menu item: Append to Another PDF - res://C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuCurrentAppendPDF.html
O8 - Extra context menu item: Convert Link Page to Foxit PDF - res://C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuLinkNewPDF.html
O8 - Extra context menu item: Convert to Foxit PDF - res://C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuCurrentNewPDF.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Intel® SGX AESM (AESMService) - Intel Corporation - C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\DRIVERS\AdminService.exe (file missing)
O23 - Service: Brave Elevation Service (BraveElevationService) - Unknown owner - C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\71.0.58.18\elevation_service.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHDCPSvc.exe
O23 - Service: Dell Command | Power Manager Notify (dcpm-notify) - Dell Inc. - C:\Program Files\Dell\CommandPowerManager\NotifyService.exe
O23 - Service: Dell Data Vault Service API (DDVCollectorSvcApi) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
O23 - Service: Dell Data Vault Collector (DDVDataCollector) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
O23 - Service: Dell Data Vault Processor (DDVRulesProcessor) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
O23 - Service: Dell Hardware Support - PC-Doctor, Inc. - C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1466\DSAPI.exe
O23 - Service: Dell SupportAssist Remediation - Dell Inc. - C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) - Dell Products, LP. - c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem0.inf,%ServiceDisplayName%;Intel(R) Dynamic Platform and Thermal Framework service (esifsvc) - Unknown owner - C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FoxitPhantomService - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe
O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
O23 - Service: @oem27.inf,%iaStorAfsWindowsService.Name%;Intel(R) Optane(TM) Memory Service (iaStorAfsService) - Intel Corporation - C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
O23 - Service: Intel(R) TPM Provisioning Service - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
O23 - Service: Intel(R) Audio Service (IntelAudioService) - Unknown owner - C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Killer Network Service (Killer Network Service x64) - Rivet Networks - C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros WLAN Driver Service (QcomWlanSrv) - Unknown owner - C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Dell SupportAssist (SupportAssistAgent) - Dell Inc. - C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: Thunderbolt(TM) Service (ThunderboltService) - Intel Corporation - C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: Waves Audio Services (WavesSysSvc) - Waves Audio Ltd. - c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
--
End of file - 12765 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-4a8f2c12-d1fe-4241-8cda-bfb9ac7d8ab6 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d87dd4d2-9fac-4e6d-b8c4-629eb84b23c7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-6dfd70e0-3195-426d-9511-e7c8fe0c7bff -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0b67df79-be54-4d71-84bd-0bab7fcc7926 -LifetimeId:8c235a2e-db2f-4c9c-9461-2b0e8e619a2b -DeviceGroupId:
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-01b66bfe-01db-44d3-880b-b9c16f6a140d -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2c412d52-3539-48f2-bcce-f52d48434e82 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-b52a18ae-19ba-4e26-a356-1c256c3b6566 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-baf88877-a7b8-4fad-bf85-f294d9f1b855 -LifetimeId:af04336a-7c3e-4e2e-bc17-5b7c7a96c898 -DeviceGroupId:WudfDefaultDevicePool
"dwm.exe"
c:\windows\system32\svchost.exe -k localservice -p -s nsi
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k netsvcs -p -s BDESVC
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s PhoneSvc
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
dashost.exe {b61f22cb-174c-41ff-950b62c635b4908a}
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-716da71e-ec27-4f07-b799-7cebac3056c2 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1ea9d54b-06ba-4b38-a485-c3df3a58d247 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-625d8c30-0f5c-49ed-9391-14cb0cd32bb6 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-003aa6fc-a553-4b01-b6ae-52de4cba7603 -LifetimeId:552bd854-dbbb-4a52-b715-c7a5fa545adc -DeviceGroupId:WudfDefaultDevicePoolPriorityHigh
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
"ctfmon.exe"
C:\WINDOWS\System32\spoolsv.exe
"C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\igfxEM.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\WINDOWS\system32\DRIVERS\AdminService.exe
C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHDCPSvc.exe
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe
"C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe"
C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
"c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe"
"C:\WINDOWS\system32\Intel\DPTF\dptf_helper.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHeciSvc.exe
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.11231.20174.0_x86__8wekyb3d8bbwe\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\SDXHelperBgt.exe" -ServerName:Microsoft.Office.Desktop.SDXHelper.AppXew0wssvfsgr71j4vt843c7dj5n9db760.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.39.222.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.39.222.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files\Logitech\LogiOptions\LogiOptions.exe" /noui
"C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe"
"C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe"
"C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe" -Jack
"C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
"C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe"
"C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1466\DSAPI.exe"
"C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe"
"C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1466\pcdrwi.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\rempl\sedsvc.exe"
"C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
"C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe"
"C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppX02tn0pw1w652jfdjy8p3265qn78k6eby.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.1.30.0_x64__htrsf667h5kn2\win32\SupportAssistAppWire.exe" /InvokerPRAID: App WriteLog
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=cs_CZ" "-cachedir=C:\Users\szmil\AppData\Local\Steam\htmlcache" "-steampid=13924" "-buildid=1550534751" "-steamid=0" "-steamuniverse=Dev" "-clientui=C:\Program Files (x86)\Steam\clientui" --disable-out-of-process-pac --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-features=TouchpadAndWheelScrollLatching,AsyncWheelEvents --enable-media-stream --disable-smooth-scrolling --num-raster-threads=4 --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\szmil\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1550534751 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2f0,0x300,0x7ff99f9f1f78,0x7ff99f9f1f88,0x7ff99f9f1f98
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1550534751 --steamid=0 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1550534751 --steamid=0 --service-request-channel-token=E4F84513036478808794D84C4DF6C114 --mojo-platform-channel-handle=1412 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files\Mozilla Firefox\firefox.exe"
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.0.947894720\688702478" -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - "C:\Users\szmil\AppData\LocalLow\Mozilla\Temp-{d8600c56-cc53-4f01-b303-5c1d3c53f2c1}" 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 1664 gpu
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.13.497487882\1785538987" -childID 2 -isForBrowser -prefsHandle 3676 -prefMapHandle 3680 -prefsLen 213 -prefMapSize 187612 -schedulerPrefs 0001,2 -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 3692 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.27.1853489553\730392167" -childID 4 -isForBrowser -prefsHandle 4860 -prefMapHandle 4864 -prefsLen 5878 -prefMapSize 187612 -schedulerPrefs 0001,2 -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 4872 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.34.939113342\242202488" -childID 5 -isForBrowser -prefsHandle 5360 -prefMapHandle 5192 -prefsLen 5878 -prefMapSize 187612 -schedulerPrefs 0001,2 -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 5324 tab
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=4CA69870504A6385D692DFC6D1BFFEA9 --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --buildid=1550534751 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=4CA69870504A6385D692DFC6D1BFFEA9 --renderer-client-id=4 --mojo-platform-channel-handle=1992 /prefetch:1
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1812.10048.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1812.10043.0_x64__8wekyb3d8bbwe\Time.exe" -ServerName:App.AppXq8avk61zazpy808ab5ppkf6taqp47km6.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.41.1780707706\1030393514" -childID 6 -isForBrowser -prefsHandle 4036 -prefMapHandle 9992 -prefsLen 5970 -prefMapSize 187612 -schedulerPrefs 0001,2 -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 5300 tab
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=31A3B75F6C94A109398BCC3901E0FAB9 --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --buildid=1550534751 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=31A3B75F6C94A109398BCC3901E0FAB9 --renderer-client-id=7 --mojo-platform-channel-handle=3960 /prefetch:1
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="9900.48.1355840080\1152685200" -childID 7 -isForBrowser -prefsHandle 4068 -prefMapHandle 5436 -prefsLen 5970 -prefMapSize 187612 -schedulerPrefs 0001,2 -parentBuildID 20190211233335 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 9900 "\\.\pipe\gecko-crash-server-pipe.9900" 3252 tab
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x734
"C:\Users\szmil\Downloads\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
=========Mozilla firefox=========
ProfilePath - C:\Users\szmil\AppData\Roaming\Mozilla\Firefox\Profiles\jj2izw2a.default
"FFExtnHTML2PDF@foxitsoftware.com"=C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 30.0.0.154 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_154.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 30.0.0.154 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_154.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A}]
Foxit PhantomPDF Create PDF ToolBar Helper - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2018-04-16 5310528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{BFD9D8A8-57FF-488A-B919-065EC77CF82F} - Foxit PhantomPDF Create PDF ToolBar - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2018-04-16 5310528]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2018-11-12 9278136]
"RtHDVBg_PushButton"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2018-11-12 1515192]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2017-10-04 79360]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2017-10-11 3943056]
"LogiOptions"=C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2018-12-15 2176648]
"WavesSvc"=c:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [2018-11-04 1213736]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\szmil\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2019-02-11 1506616]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2019-02-18 3144480]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Dell Display Manager.lnk - C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"SlowLinkDetectEnabled"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2019-02-26 21:31:37 ----D---- C:\rsit
2019-02-26 21:31:37 ----D---- C:\Program Files\trend micro
2019-02-26 20:35:41 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2019-02-24 12:24:09 ----D---- C:\Program Files (x86)\Dell Digital Delivery
2019-02-22 10:02:56 ----D---- C:\Program Files\Goodix
2019-02-22 10:02:19 ----D---- C:\Program Files\Waves
2019-02-22 10:01:57 ----D---- C:\WINDOWS\LastGood.Tmp
2019-02-22 10:01:43 ----A---- C:\WINDOWS\SYSWOW64\RTHDASIO.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\tbb_waves.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RTHDASIO64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2019-02-22 10:01:43 ----A---- C:\WINDOWS\system32\drivers\IntcAudioBus.sys
2019-02-22 10:01:42 ----A---- C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll
2019-02-22 10:01:42 ----A---- C:\WINDOWS\system32\MaxxAudioRender64.dll
2019-02-22 10:01:42 ----A---- C:\WINDOWS\system32\MaxxAudioCapture64.dll
2019-02-22 10:01:41 ----A---- C:\WINDOWS\RtlExUpd.dll
2019-02-22 10:01:39 ----A---- C:\WINDOWS\SYSWOW64\RtkMsgs.dll
2019-02-22 10:01:12 ----D---- C:\Program Files\Killer Networking
2019-02-22 09:46:41 ----A---- C:\WINDOWS\invcol.tmp
2019-02-22 09:45:43 ----D---- C:\WINDOWS\{1AF69E72-9462-4EDE-942F-A4039D3DF43E}
2019-02-22 09:42:17 ----ASH---- C:\pagefile.sys
2019-02-12 20:55:34 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-02-12 20:55:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-12 20:55:29 ----A---- C:\WINDOWS\system32\edgehtml.dll
2019-02-12 20:55:28 ----A---- C:\WINDOWS\system32\mshtml.dll
2019-02-12 20:55:21 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2019-02-12 20:55:21 ----A---- C:\WINDOWS\system32\wininet.dll
2019-02-12 20:55:21 ----A---- C:\WINDOWS\system32\sppsvc.exe
2019-02-12 20:55:19 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2019-02-12 20:55:18 ----A---- C:\WINDOWS\system32\windows.storage.dll
2019-02-12 20:55:18 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2019-02-12 20:55:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2019-02-12 20:55:16 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2019-02-12 20:55:16 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-02-12 20:55:15 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-02-12 20:55:15 ----A---- C:\WINDOWS\system32\cdp.dll
2019-02-12 20:55:13 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2019-02-12 20:55:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-02-12 20:55:12 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2019-02-12 20:55:12 ----A---- C:\WINDOWS\system32\ieframe.dll
2019-02-12 20:55:11 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-02-12 20:55:11 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2019-02-12 20:55:11 ----A---- C:\WINDOWS\system32\jscript9.dll
2019-02-12 20:55:11 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2019-02-12 20:55:10 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2019-02-12 20:55:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2019-02-12 20:55:09 ----A---- C:\WINDOWS\system32\win32kfull.sys
2019-02-12 20:55:08 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2019-02-12 20:55:07 ----A---- C:\WINDOWS\system32\smartscreen.exe
2019-02-12 20:55:07 ----A---- C:\WINDOWS\system32\msxml6.dll
2019-02-12 20:55:07 ----A---- C:\WINDOWS\system32\mfcore.dll
2019-02-12 20:55:07 ----A---- C:\WINDOWS\system32\hvix64.exe
2019-02-12 20:55:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2019-02-12 20:55:06 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2019-02-12 20:55:06 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2019-02-12 20:55:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2019-02-12 20:55:06 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-02-12 20:55:05 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2019-02-12 20:55:05 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2019-02-12 20:55:05 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2019-02-12 20:55:05 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2019-02-12 20:55:05 ----A---- C:\WINDOWS\system32\KernelBase.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\system32\ntdll.dll
2019-02-12 20:55:04 ----A---- C:\WINDOWS\system32\hvax64.exe
2019-02-12 20:55:04 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2019-02-12 20:55:03 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\system32\winhttp.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2019-02-12 20:55:03 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\svchost.exe
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\StorSvc.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\rmclient.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\oleaut32.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\kernel32.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2019-02-12 20:55:02 ----A---- C:\WINDOWS\system32\gdi32full.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\svchost.exe
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\system32\msi.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\system32\edgeIso.dll
2019-02-12 20:55:01 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2019-02-12 20:55:00 ----A---- C:\WINDOWS\SYSWOW64\wldp.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\wldp.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\winresume.exe
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\winload.exe
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\msvproc.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2019-02-12 20:55:00 ----A---- C:\WINDOWS\system32\acmigration.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\wintrust.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\mfps.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\browserbroker.dll
2019-02-12 20:54:59 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\hal.dll
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\spacedump.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\system32\drivers\bindflt.sys
2019-02-12 20:54:58 ----A---- C:\WINDOWS\HelpPane.exe
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\spacebridge.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\NtlmShared.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\SYSWOW64\CapabilityAccessManagerClient.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\wuuhext.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\spacebridge.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\smss.exe
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\NtlmShared.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\npmproxy.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\mf3216.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\hvloader.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\hidparse.sys
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\drivers\exfat.sys
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2019-02-12 20:54:57 ----A---- C:\WINDOWS\system32\browser_broker.exe
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\smartscreenps.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\npmproxy.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\srpapi.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\smartscreenps.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\itss.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys
2019-02-12 20:54:56 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-02-12 20:54:35 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2019-02-08 18:54:33 ----D---- C:\Users\szmil\AppData\Roaming\Logishrd
2019-02-08 18:54:08 ----D---- C:\ProgramData\Logishrd
2019-02-08 18:54:05 ----D---- C:\Program Files\Logitech
2019-02-05 20:17:56 ----D---- C:\ProgramData\Mozilla
======List of files/folders modified in the last 1 month======
2019-02-26 21:31:40 ----D---- C:\WINDOWS\Temp
2019-02-26 21:31:39 ----D---- C:\WINDOWS\Prefetch
2019-02-26 21:31:37 ----RD---- C:\Program Files
2019-02-26 21:30:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-02-26 21:22:07 ----D---- C:\WINDOWS\system32\config
2019-02-26 21:12:58 ----D---- C:\Program Files (x86)\Steam
2019-02-26 20:53:08 ----HD---- C:\Program Files\WindowsApps
2019-02-26 20:52:49 ----D---- C:\WINDOWS\AppReadiness
2019-02-26 20:39:57 ----D---- C:\WINDOWS\System32
2019-02-26 20:39:57 ----D---- C:\WINDOWS\INF
2019-02-26 20:39:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2019-02-26 20:37:46 ----D---- C:\WINDOWS\system32\DriverStore
2019-02-26 20:37:46 ----D---- C:\WINDOWS\system32\drivers
2019-02-26 20:35:41 ----D---- C:\WINDOWS\system32\catroot2
2019-02-26 20:35:37 ----D---- C:\WINDOWS\system32\sru
2019-02-26 20:35:35 ----D---- C:\ProgramData\Goodix
2019-02-26 19:47:59 ----D---- C:\WINDOWS\system32\LogFiles
2019-02-25 20:40:15 ----D---- C:\WINDOWS\system32\SleepStudy
2019-02-25 20:39:46 ----D---- C:\WINDOWS\Logs
2019-02-25 20:35:46 ----RD---- C:\WINDOWS\Microsoft.NET
2019-02-25 20:09:36 ----D---- C:\WINDOWS\system32\WinBioDatabase
2019-02-24 21:19:55 ----D---- C:\Users\szmil\AppData\Roaming\RStudio
2019-02-24 18:51:37 ----D---- C:\WINDOWS\Registration
2019-02-24 12:24:09 ----SHD---- C:\WINDOWS\Installer
2019-02-24 12:24:09 ----RD---- C:\Program Files (x86)
2019-02-23 19:54:41 ----D---- C:\WINDOWS\system32\drivers\wd
2019-02-22 13:06:34 ----D---- C:\WINDOWS\Minidump
2019-02-22 13:06:33 ----D---- C:\Windows
2019-02-22 10:39:50 ----D---- C:\WINDOWS\LiveKernelReports
2019-02-22 10:10:19 ----D---- C:\Program Files (x86)\Dell
2019-02-22 10:07:10 ----D---- C:\WINDOWS\system32\drivers\UMDF
2019-02-22 10:03:40 ----D---- C:\WINDOWS\system32\Tasks
2019-02-22 10:03:15 ----D---- C:\Program Files (x86)\Intel
2019-02-22 10:02:59 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2019-02-22 10:02:59 ----D---- C:\WINDOWS\system32\CatRoot
2019-02-22 10:02:26 ----HD---- C:\Program Files (x86)\Temp
2019-02-22 10:02:24 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2019-02-22 10:02:24 ----D---- C:\WINDOWS\system32\RTCOM
2019-02-22 10:01:59 ----D---- C:\WINDOWS\SysWOW64
2019-02-22 10:01:13 ----D---- C:\ProgramData\RivetNetworks
2019-02-22 10:00:38 ----D---- C:\ProgramData\Package Cache
2019-02-22 09:46:10 ----D---- C:\ProgramData\Dell
2019-02-22 09:46:07 ----RSD---- C:\WINDOWS\assembly
2019-02-20 21:17:53 ----D---- C:\Users\szmil\AppData\Roaming\xm1
2019-02-18 21:51:47 ----D---- C:\WINDOWS\WinSxS
2019-02-17 17:38:10 ----D---- C:\Program Files\rempl
2019-02-14 09:33:24 ----D---- C:\WINDOWS\system32\NDF
2019-02-14 01:10:57 ----D---- C:\Program Files\Mozilla Firefox
2019-02-14 01:10:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2019-02-12 22:30:56 ----SD---- C:\WINDOWS\SYSWOW64\F12
2019-02-12 22:30:56 ----SD---- C:\WINDOWS\system32\F12
2019-02-12 22:30:56 ----RD---- C:\Program Files\Windows Defender
2019-02-12 22:30:56 ----D---- C:\WINDOWS\TextInput
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\en-US
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\zu-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\yo-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\xh-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\wo-SN
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\tn-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\ti-ET
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\rw-RW
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\nso-ZA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\migration
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\ig-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\chr-CHER-US
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\en-US
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\cs-CZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\Boot
2019-02-12 22:30:56 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2019-02-12 22:30:56 ----D---- C:\WINDOWS\ShellExperiences
2019-02-12 22:30:56 ----D---- C:\WINDOWS\bcastdvr
2019-02-12 22:30:56 ----D---- C:\WINDOWS\apppatch
2019-02-12 22:30:56 ----D---- C:\Program Files\internet explorer
2019-02-12 22:30:56 ----D---- C:\Program Files (x86)\Internet Explorer
2019-02-12 20:58:41 ----D---- C:\WINDOWS\CbsTemp
2019-02-12 20:54:31 ----D---- C:\WINDOWS\system32\MRT
2019-02-12 20:45:00 ----AC---- C:\WINDOWS\system32\MRT.exe
2019-02-08 18:54:08 ----HD---- C:\ProgramData
2019-02-08 18:51:30 ----D---- C:\ProgramData\Packages
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStorA;@oem27.inf,%iaStorA.DeviceDesc%;Intel(R) Chipset SATA/PCIe RST Premium Controller; C:\WINDOWS\System32\drivers\iaStorA.sys [2017-10-04 897536]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-12-08 58168]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-12-08 304144]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-07-14 414720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-12-08 43008]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2018-05-22 72024]
R3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth Stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2018-11-09 200704]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-12-08 106496]
R3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth Hands-Free; C:\WINDOWS\System32\drivers\BthHfAud.sys [2018-04-12 48640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2018-04-12 85504]
R3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 DDDriver;DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [2018-10-20 36400]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2017-11-22 74144]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2017-11-22 69536]
R3 esif_lf;esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [2017-11-22 382880]
R3 HidEventFilter;@oem3.inf,%HidEventFilter%;Intel(R) HID Event Filter; C:\WINDOWS\System32\drivers\HidEventFilter.sys [2017-11-30 85064]
R3 iaLPSS2_GPIO2;@oem7.inf,%iaLPSS2_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [2017-06-28 98976]
R3 iaLPSS2_I2C;@oem49.inf,%iaLPSS2_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys [2017-06-28 191648]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\igdkmd64.sys [2018-10-08 14072952]
R3 IntcAudioBus;@oem63.inf,%IntcAudioBus.SVCDESC%;Intel(R) Smart Sound Technology (Intel(R) SST) Bus; C:\WINDOWS\System32\drivers\IntcAudioBus.sys [2018-09-10 268192]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2018-11-12 6455992]
R3 IntcDAud;@oem32.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\System32\DriverStore\FileRepository\intcdaud.inf_amd64_3b876fb0bfb3390a\IntcDAud.sys [2018-10-08 635368]
R3 IntcOED;@oem57.inf,%IntcOED.SVCDESC%;Intel(R) Smart Sound Technology (Intel(R) SST) OED; C:\WINDOWS\System32\drivers\IntcOED.sys [2018-11-15 848704]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2019-02-26 261032]
R3 MEIx64;@oem15.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2018-07-15 228992]
R3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [2018-04-12 46592]
R3 Qcamain10x64;@oem18.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN 11AC device driver; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2018-07-29 2355544]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 RfeCoSvc;RfeCoSvc; C:\WINDOWS\system32\DRIVERS\RfeCo10X64.sys [2018-08-10 141480]
R3 RTSPER;@oem25.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\System32\drivers\RtsPer.sys [2017-11-01 864704]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-08-03 128920]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 AppleLowerFilter;@oem62.inf,%AppleLowerFilterDisplayName%;Apple Lower Filter Driver; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [2018-05-10 35560]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2019-01-09 92704]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2018-12-08 1097728]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 DellProf;DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [2018-05-08 41208]
S3 dlcdcncm;dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [2017-09-18 92944]
S3 dlusbaudio;dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio_x64.sys [2017-09-18 238352]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 grmnusb;grmnusb; C:\WINDOWS\system32\drivers\grmnusb.sys [2012-04-18 19304]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2019-02-06 76088]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2_SPI;Intel(R) Serial IO SPI Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_SPI.sys [2017-06-28 158368]
S3 iaLPSS2_UART2;Intel(R) Serial IO UART Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [2017-06-28 310944]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 iaStorAfs;@oem27.inf,%iaStorAfs.DisplayName%;iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [2017-10-04 70656]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2019-02-06 945680]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESMService;Intel® SGX AESM; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [2017-11-12 3089680]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\DRIVERS\AdminService.exe [2018-05-22 424288]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 CDPUserSvc_3148c;CDPUserSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHDCPSvc.exe [2018-10-08 484328]
R2 DDVCollectorSvcApi;Dell Data Vault Service API; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [2018-10-22 209392]
R2 DDVDataCollector;Dell Data Vault Collector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [2018-10-22 3347440]
R2 DDVRulesProcessor;Dell Data Vault Processor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [2018-10-22 218096]
R2 Dell Hardware Support;Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.6992.1466\DSAPI.exe [2019-01-08 1035072]
R2 Dell SupportAssist Remediation;Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [2017-11-03 119840]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 esifsvc;@oem0.inf,%ServiceDisplayName%;Intel(R) Dynamic Platform and Thermal Framework service; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [2017-11-22 1705040]
R2 FoxitReaderService;Foxit Reader Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [2018-04-17 1659456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2017-10-04 17992]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\igfxCUIService.exe [2018-10-08 393704]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2018-07-15 218176]
R2 Killer Network Service x64;Killer Network Service; C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe [2018-08-10 2318016]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2018-07-15 625216]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-09-19 6347056]
R2 OneSyncSvc_3148c;OneSyncSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 QcomWlanSrv;Qualcomm Atheros WLAN Driver Service; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [2018-07-29 190808]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2018-11-12 277184]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-07-14 760888]
R2 sedsvc;Windows Remediation Service; C:\Program Files\rempl\sedsvc.exe [2019-02-13 332088]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki129615.inf_amd64_7fbc6baf2cd21d32\IntelCpHeciSvc.exe [2018-10-08 489448]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-12 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 PimIndexMaintenanceSvc_3148c;PimIndexMaintenanceSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S2 DellDigitalDelivery;Dell Digital Delivery Service; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2018-01-24 215440]
S2 Intel(R) TPM Provisioning Service;Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [2018-06-08 714952]
S2 IntelAudioService;Intel(R) Audio Service; C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe [2018-11-15 212760]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BcastDVRUserService_3148c;BcastDVRUserService_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BluetoothUserService_3148c;BluetoothUserService_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BraveElevationService;Brave Elevation Service; C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\71.0.58.18\elevation_service.exe []
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 CaptureService_3148c;CaptureService_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 dcpm-notify;Dell Command | Power Manager Notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [2018-08-24 313440]
S3 Dell.CommandPowerManager.Service;Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe [2018-04-12 20888]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicePickerUserSvc_3148c;DevicePickerUserSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicesFlowUserSvc_3148c;DevicesFlowUserSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-08-03 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 FoxitPhantomService;FoxitPhantomService; C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe [2018-04-17 1658944]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 iaStorAfsService;@oem27.inf,%iaStorAfsWindowsService.Name%;Intel(R) Optane(TM) Memory Service; C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe [2017-10-04 2413744]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [2018-06-08 762568]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 MessagingService_3148c;MessagingService_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2019-02-13 239056]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PrintWorkflowUserSvc_3148c;PrintWorkflowUserSvc_3148c; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-07-15 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-05-12 826776]
-----------------EOF-----------------