Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
runt
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 lis 2006 20:21
Bydliště: Plzeň

Prosím o kontrolu logu

#1 Příspěvek od runt »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Soki at 2020-03-12 17:40:34
Microsoft Windows 10 Home
System drive C: has 132 GB (56%) free of 238 GB
Total RAM: 8074 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:40:38, on 12.03.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe
C:\Users\Soki\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\EitherMouse\EitherMouse.exe
C:\Users\Soki\AppData\Roaming\uTorrent\uninstall.exe
C:\Users\Soki\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files\trend micro\Soki.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: McAfee WebAdvisor - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O4 - HKLM\..\Run: [Opera Browser Assistant] C:\Program Files\Opera\assistant\browser_assistant.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - Startup: EitherMouse.lnk = C:\Program Files (x86)\EitherMouse\EitherMouse.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\System32\DriverStore\FileRepository\u0352262.inf_amd64_5771e42c4840fa20\B352258\atiesrxx.exe
O23 - Service: AMD User Experience Program Launcher (AUEPLauncher) - AMD - C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPLauncher.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_3e033 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.90\elevation_service.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: KMSEmulator - MDL Forum, mod by Ratiborus - C:\Windows\KMS\bin\KMSSS.exe
O23 - Service: McAfee WebAdvisor - McAfee, LLC - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer - TeamViewer Germany GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9983 bytes

======Listing Processes======









C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM
winlogon.exe
"fontdrvhost.exe"
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\DriverStore\FileRepository\u0352262.inf_amd64_5771e42c4840fa20\B352258\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
atieclxx
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache

C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s NcdAutoSetup
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s fdPHost
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s FDResPub
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
dashost.exe {bd7c0002-e0c5-49b5-ad0b1dbdbc270156}
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
C:\Windows\system32\IProsetMonitor.exe
C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
"C:\Windows\KMS\bin\KMSSS.exe" -Port 1688 -PWin RandomKMSPID -PO14 RandomKMSPID -PO15 RandomKMSPID -AI 43200 -RI 43200 KillProcessOnPort
"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
C:\WINDOWS\System32\svchost.exe -k netsvcs
"ctfmon.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
"C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Windows\System32\SecurityHealthSystray.exe"

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Soki\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
"C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
"C:\Program Files (x86)\EitherMouse\EitherMouse.exe"
"C:\Users\Soki\AppData\Roaming\uTorrent\uninstall.exe" backup
utorrent.exe
"C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/Win64/UnrealCEFSubProcess.exe" --type=gpu-process --no-sandbox --lang=en --locales-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources/locales" --log-file=C:/Users/Soki/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --log-severity=warning --product-version="EpicGamesLauncher/10.14.1-12112961+++Portal+Release-Live UnrealEngine/4.23.0-12112961+++Portal+Release-Live Chrome/59.0.3071.15" --resources-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources" --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,19,20,23,41,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x1002 --gpu-device-id=0x6938 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=26.20.15019.15019 --gpu-driver-date=2-26-2020 --gpu-secondary-vendor-ids=0x8086 --gpu-secondary-device-ids=0x0412 --lang=en --locales-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources/locales" --log-file=C:/Users/Soki/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --log-severity=warning --product-version="EpicGamesLauncher/10.14.1-12112961+++Portal+Release-Live UnrealEngine/4.23.0-12112961+++Portal+Release-Live Chrome/59.0.3071.15" --resources-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources" --service-request-channel-token=12D5D44B77EA81DE4516C2D8FD631950 --mojo-platform-channel-handle=1952 /prefetch:2
"C:\Program Files\AMD\CNext\CNext\Radeonsoftware.exe" atlogon
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\AMD\CNext\CNext\amdrsserv.exe"
"C:\Program Files\AMD\CNext\CNext\amdow.exe" 11716
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_12003.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer/YourPhoneServer.exe" -Embedding
"C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\MicrosoftEdgeSH.exe SCODEF:7248 CREDAT:9730 APH:1000000000000010 JITHOST /prefetch:2
"C:\Windows\System32\MicrosoftEdgeCP.exe" -ServerName:Windows.Internal.WebRuntime.ContentProcessServer
"C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPLauncher.exe"
AUEPMaster.exe

C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"


AUEPUF.exe
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
"C:\Program Files\Opera\67.0.3575.53\opera_autoupdate.exe" --version=67.0.3575.53 --lang=cs --producttype=assistant --requesttype=automatic --downloaddir="C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate" --installationdatadir="C:\Program Files\Opera" --installdir="C:\Program Files\Opera\assistant" --productiscomponent --user-data-dir="C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate" --nometrics --scheduledtask
"C:\Program Files\Opera\67.0.3575.53\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate\Crash Reports" "--crash-count-file=C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=67.0.3575.53 --initial-client-data=0x21c,0x220,0x224,0x218,0x228,0x7ff7a5959860,0x7ff7a5959870,0x7ff7a5959880
"C:\WINDOWS\system32\config\systemprofile\Downloads\opera autoupdate\CProgram FilesOperaassistant\3924_551988345\Assistant_67.0.3575.79_Setup.exe"
"C:\WINDOWS\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe" -ServerName:App.AppXagta193n5rpf7mheremt3yyfa1g555vc.mca
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer15_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer15_Logfile.log
"C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe" fb28e830-7c29-4591-b2df-4e16275fa0d9 SOFTWARE\AMD\DVR\Overlays
"C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe"
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1910.0.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --ran-launcher --started-from-shortcut
"C:\Program Files\Opera\67.0.3575.53\opera_crashreporter.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Soki\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Soki\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=67.0.3575.53 --initial-client-data=0x31c,0x320,0x324,0x318,0x328,0x7ffb87ad73f8,0x7ffb87ad7408,0x7ffb87ad7418
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=gpu-process --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --mojo-platform-channel-handle=1744 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=utility --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --service-sandbox-type=network --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --mojo-platform-channel-handle=2012 /prefetch:8
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2788 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --extension-process --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2792 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1504 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=utility --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --service-sandbox-type=audio --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --mojo-platform-channel-handle=3256 /prefetch:8
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3616 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4352 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --extension-process --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --extension-process --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4372 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --extension-process --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6748 /prefetch:1
C:\WINDOWS\system32\AUDIODG.EXE 0x648
"C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe" --IPCport 5939
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc

C:\Windows\System32\smartscreen.exe -Embedding
taskhostw.exe
C:\WINDOWS\system32\msiexec.exe /V
C:\WINDOWS\System32\svchost.exe -k swprv
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7100 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2448 /prefetch:1
"C:\Program Files\Opera\67.0.3575.53\opera.exe" --type=renderer --field-trial-handle=1500,1198113484177867014,3237336829995021767,131072 --lang=cs --disable-oor-cors --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-test:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8372 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 772 776 784 8192 780
"C:\Users\Soki\AppData\Local\Temp\scoped_dir10060_402747319\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Soki\AppData\Roaming\Mozilla\Firefox\Profiles\a86l18vh.default-1558640374635

prefs.js - "browser.search.useDBForOrder" - true

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.344 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_344.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.344 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_344.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-11 210632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor - C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-03-10 1337336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-03-10 1049040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\WINDOWS\system32\SecurityHealthSystray.exe [2020-02-12 84992]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-07-15 14040792]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2017-04-19 79360]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Opera Browser Assistant"=C:\Program Files\Opera\assistant\browser_assistant.exe [2020-03-03 3024408]

C:\Users\Soki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
EitherMouse.lnk - C:\Program Files (x86)\EitherMouse\EitherMouse.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSecurityTab"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 2 months======

2020-03-12 17:40:34 ----D---- C:\rsit
2020-03-12 17:40:34 ----D---- C:\Program Files\trend micro
2020-03-12 17:20:02 ----A---- C:\WINDOWS\system32\authuitu.dll
2020-03-12 17:20:01 ----A---- C:\WINDOWS\SYSWOW64\authuitu.dll
2020-03-12 17:18:38 ----D---- C:\Users\Soki\AppData\Roaming\TuneUp Software
2020-03-12 17:18:24 ----D---- C:\ProgramData\TuneUp Software
2020-03-12 17:18:21 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2020-03-12 14:17:19 ----D---- C:\Users\Soki\AppData\Roaming\TeamViewer
2020-03-12 14:17:14 ----D---- C:\Program Files (x86)\TeamViewer
2020-03-11 23:38:40 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2020-03-11 23:38:39 ----A---- C:\WINDOWS\system32\wmp.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\MSFlacEncoder.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2020-03-11 23:38:35 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2020-03-11 23:38:34 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2020-03-11 23:38:34 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2020-03-11 23:38:34 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2020-03-11 23:38:34 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\winmde.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\MSFlacEncoder.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2020-03-11 23:38:33 ----A---- C:\WINDOWS\system32\HologramWorld.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfsvr.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfplat.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-03-11 23:38:32 ----A---- C:\WINDOWS\system32\mfcore.dll
2020-03-11 23:38:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2020-03-11 23:38:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2020-03-11 23:38:31 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2020-03-11 23:38:31 ----A---- C:\WINDOWS\SYSWOW64\msimsg.dll
2020-03-11 23:38:31 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\odbc32.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\IndexedDbLegacy.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\iemigplugin.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2020-03-11 23:38:30 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2020-03-11 23:38:29 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2020-03-11 23:38:29 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2020-03-11 23:38:29 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2020-03-11 23:38:28 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\systemreset.exe
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\ResetEngOnline.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\ResetEngine.exe
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\reseteng.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\rdpudd.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\rdpnano.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\rdpcore.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\odbc32.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\msimsg.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\msi.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2020-03-11 23:38:27 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\jscript9.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2020-03-11 23:38:26 ----A---- C:\WINDOWS\system32\Chakra.dll
2020-03-11 23:38:25 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2020-03-11 23:38:25 ----A---- C:\WINDOWS\system32\mshtml.dll
2020-03-11 23:38:25 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\wsecedit.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\werconcpl.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\edgehtml.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\computecore.dll
2020-03-11 23:38:24 ----A---- C:\WINDOWS\system32\ClipUp.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\SYSWOW64\rtmmvrortc.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\SYSWOW64\ortcengine.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\upnphost.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\upnpcont.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\udhisapi.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\tcbloader.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\hvix64.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\hvax64.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\dusmtask.exe
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2020-03-11 23:38:22 ----A---- C:\WINDOWS\system32\dusmapi.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\windowsperformancerecordercontrol.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\scecli.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\rtm.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\omadmapi.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\msimg32.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\msauserext.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\iprtprio.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\enterpriseresourcemanager.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\drivers\afunix.sys
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\DMAlertListener.ProxyStub.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2020-03-11 23:38:21 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\LaunchTM.exe
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\directml.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2020-03-11 23:38:20 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\rdpsharercom.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\GraphicsCapture.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2020-03-11 23:38:19 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WsmRes.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\wsmplpxy.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WSManMigrationPlugin.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\TpmCertResources.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\sxstrace.exe
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\sxs.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\sppcomapi.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\profapi.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeManagerObj.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeHelper.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\dot3msm.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\dot3api.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\DeviceReactivation.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\vpnike.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\vbscript.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\scecli.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\rtm.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\pnpclean.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\mprdim.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\iprtprio.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\DeviceUpdateAgent.dll
2020-03-11 23:38:18 ----A---- C:\WINDOWS\system32\comdlg32.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\urlmon.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\npmproxy.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\notepad.exe
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\nlmsprep.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\nlmproxy.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\nlasvc.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\nlaapi.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\netprofm.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\ncsi.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\MUILanguageCleanup.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\msIso.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\msauserext.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\lpremove.exe
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\lpksetup.exe
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\jsproxy.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\edgeIso.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\drivers\afunix.sys
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\AxInstUI.exe
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\AxInstSv.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\system32\asycfilt.dll
2020-03-11 23:38:17 ----A---- C:\WINDOWS\notepad.exe
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\wininet.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\omadmclient.exe
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\omadmapi.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\MdmDiagnostics.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\gdi32full.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-03-11 23:38:16 ----A---- C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\winlogon.exe
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\SecurityHealthHost.exe
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\msimg32.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\mf3216.dll
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2020-03-11 23:38:14 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2020-03-11 23:38:13 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\sechost.dll
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\profapi.dll
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\KernelBase.dll
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2020-03-11 23:38:13 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\WinTypes.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\winhttp.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\wincorlib.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\wermgr.exe
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\weretw.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\wer.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\utcutil.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\profsvc.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\pacjsworker.exe
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\oleaut32.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\ntdll.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\diagtrack.dll
2020-03-11 23:38:12 ----A---- C:\WINDOWS\system32\combase.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\twinui.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sxstrace.exe
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sxs.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sppwinob.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sppsvc.exe
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sppobjs.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\slui.exe
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\rtmpal.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\rtmmvrortc.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\ortcengine.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\msctf.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2020-03-11 23:38:11 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\winresume.exe
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\winload.exe
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\uDWM.dll
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\shell32.dll
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\OpenWith.exe
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\ole32.dll
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\dwmcore.dll
2020-03-11 23:38:10 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\uReFS.dll
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\tier2punctuations.dll
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\SRH.dll
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\refsutil.exe
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\LaunchTM.exe
2020-03-11 23:38:09 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\win32u.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\win32kfull.sys
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\win32k.sys
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\wci.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\usosvc.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\usocoreworker.exe
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\MusNotification.exe
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2020-03-11 23:38:08 ----A---- C:\WINDOWS\system32\daxexec.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\wpnservice.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\wpnprv.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\wpncore.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\user32.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\profext.dll
2020-03-11 23:38:07 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\windows.storage.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\tquery.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\rdpsharercom.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\mssvp.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\mssrch.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\mssprxy.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\mssph.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\mssitlb.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\msscntrs.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\InstallService.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\InputService.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\GraphicsCapture.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\esent.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2020-03-11 23:38:06 ----A---- C:\WINDOWS\system32\dxgi.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\wlidprov.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\qmgr.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\MSAProfileNotificationHandler.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\FntCache.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\directml.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\CustomInstallExec.exe
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\cdd.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\bisrv.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\appinfo.dll
2020-03-11 23:38:05 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WsmRes.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wsmplpxy.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WSManMigrationPlugin.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wlrmdr.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\win32spl.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wifitask.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\vdsbas.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\TpmCertResources.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\tbs.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provtool.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provops.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provhandlers.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provengine.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\provdatastore.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\pkeyhelper.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\netman.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\mpnotify.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\localspl.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\winnat.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\tbs.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\drivers\Acx01000.sys
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\dot3svc.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\dot3msm.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\dot3api.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2020-03-11 23:38:04 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-03-11 23:38:04 ----A---- C:\WINDOWS\explorer.exe
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\wwansvc.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\Windows.Management.Service.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\vmbuspipe.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\TetheringMgr.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\DTUHandler.exe
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\pciide.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\KNetPwrDepBroker.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\intelide.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\BthMini.SYS
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\ataport.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\atapi.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\amdppm.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\drivers\amdk8.sys
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\autopilotdiag.dll
2020-03-11 23:38:03 ----A---- C:\WINDOWS\system32\autopilot.dll
2020-03-11 23:38:02 ----A---- C:\WINDOWS\system32\drivers\monitor.sys
2020-03-11 23:38:02 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2020-03-11 23:38:02 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2020-03-11 23:33:42 ----A---- C:\WINDOWS\system32\poqexec.exe
2020-03-11 23:33:41 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2020-03-03 16:24:35 ----D---- C:\Program Files (x86)\AMD
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo-1-999-0-0-0.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1-999-0-0-0.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\RapidFireServer.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\Rapidfire.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\mcl32.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\mantleaxl32.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\mantle32.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\GameManager32.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\SYSWOW64\detoured.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\RapidFireServer64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\Rapidfire64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\mcl64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\mantleaxl64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\mantle64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\GameManager64.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\EEURestart.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\dgtrayicon.exe
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\detoured.dll
2020-03-03 16:21:52 ----A---- C:\WINDOWS\system32\clinfo.exe
2020-03-03 16:21:44 ----A---- C:\WINDOWS\SYSWOW64\atisamu32.dll
2020-03-03 16:21:44 ----A---- C:\WINDOWS\system32\atisamu64.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\SYSWOW64\atieah32.exe
2020-03-03 16:21:43 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atimuixx.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atimpc64.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atig6txx.dll
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atieclxx.exe
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atieah64.exe
2020-03-03 16:21:43 ----A---- C:\WINDOWS\system32\atidxx64.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\SYSWOW64\atiadlxx.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\SYSWOW64\amfrt32.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\SYSWOW64\amf-mft-mjpeg-decoder32.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\system32\atidemgy.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\system32\aticfx64.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\system32\ati2erec.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\system32\amfrt64.dll
2020-03-03 16:21:42 ----A---- C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2020-03-03 16:21:41 ----A---- C:\WINDOWS\SYSWOW64\amdxc32.dll
2020-03-03 16:21:41 ----A---- C:\WINDOWS\system32\amdxc64.dll
2020-03-03 16:21:40 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2020-03-03 16:21:40 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2020-03-03 16:21:38 ----A---- C:\WINDOWS\SYSWOW64\amdmcl32.dll
2020-03-03 16:21:38 ----A---- C:\WINDOWS\system32\amdmiracast.dll
2020-03-03 16:21:38 ----A---- C:\WINDOWS\system32\amdmcl64.dll
2020-03-03 16:21:37 ----A---- C:\WINDOWS\SYSWOW64\amdlvr32.dll
2020-03-03 16:21:37 ----A---- C:\WINDOWS\SYSWOW64\amdihk32.dll
2020-03-03 16:21:37 ----A---- C:\WINDOWS\system32\amdlvr64.dll
2020-03-03 16:21:37 ----A---- C:\WINDOWS\system32\amdlogum.exe
2020-03-03 16:21:36 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\SYSWOW64\amdgfxinfo32.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\SYSWOW64\amdave32.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\system32\OpenCL.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\system32\amdhip64.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\system32\amdgfxinfo64.dll
2020-03-03 16:21:36 ----A---- C:\WINDOWS\system32\amdave64.dll
2020-03-03 16:21:35 ----A---- C:\WINDOWS\SYSWOW64\amd_comgr32.dll
2020-03-03 16:21:34 ----A---- C:\WINDOWS\system32\amd_comgr.dll
2020-02-27 19:50:51 ----D---- C:\ProgramData\Apple Computer
2020-02-27 19:45:30 ----D---- C:\Program Files\Common Files\Apple
2020-02-27 19:45:21 ----D---- C:\ProgramData\Apple
2020-02-27 19:44:06 ----D---- C:\Users\Soki\AppData\Roaming\Apple Computer
2020-02-27 19:44:05 ----D---- C:\Users\Soki\AppData\Roaming\iMobie
2020-02-27 19:43:58 ----D---- C:\Program Files (x86)\iMobie
2020-02-13 00:26:19 ----D---- C:\ProgramData\ssh
2020-02-12 18:57:53 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2020-02-12 18:57:53 ----A---- C:\WINDOWS\system32\wbengine.exe
2020-02-12 18:57:52 ----A---- C:\WINDOWS\system32\cdp.dll
2020-02-12 18:57:50 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2020-02-12 18:57:50 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2020-02-12 18:57:50 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2020-02-12 18:57:48 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-02-12 18:57:48 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-12 18:57:48 ----A---- C:\WINDOWS\system32\mf.dll
2020-02-12 18:57:48 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2020-02-12 18:57:44 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2020-02-12 18:57:44 ----A---- C:\WINDOWS\SYSWOW64\tapisrv.dll
2020-02-12 18:57:44 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2020-02-12 18:57:44 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2020-02-12 18:57:43 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\fdWSD.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\fdSSDP.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\tsgqec.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\termsrv.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\tapisrv.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\sysmain.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\SrTasks.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\srrstr.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\srcore.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\rstrui.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\recdisc.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\rdpclip.exe
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\mstscax.dll
2020-02-12 18:57:41 ----A---- C:\WINDOWS\system32\CPFilters.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\srms.dat
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\rdpencom.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\FsIso.exe
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\FSClient.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\FrameServer.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\DscCore.dll
2020-02-12 18:57:40 ----A---- C:\WINDOWS\system32\DAFMCP.dll
2020-02-12 18:57:39 ----A---- C:\WINDOWS\system32\ieproxy.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\werui.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\jscript.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\fdWSD.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\dfrgui.exe
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\defragsvc.dll
2020-02-12 18:57:37 ----A---- C:\WINDOWS\system32\Defrag.exe
2020-02-12 18:57:36 ----A---- C:\WINDOWS\system32\resutils.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\skci.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\securekernel.exe
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\sdshext.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\sdrsvc.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\sdengin2.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\sdclt.exe
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\kdhvcom.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\hvloader.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\fdSSDP.dll
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2020-02-12 18:57:35 ----A---- C:\WINDOWS\system32\clusapi.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.FileExplorer.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\Websocket.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\rtutils.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\rdpviewerax.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\printui.exe
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\logoncli.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\keyiso.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\compstui.dll
2020-02-12 18:57:34 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\Winlangdb.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\UserLanguageProfileCallback.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\rdpserverbase.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\globinputhost.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\BCP47mrm.dll
2020-02-12 18:57:33 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2020-02-12 18:57:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Launcher.dll
2020-02-12 18:57:32 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\SpatialAudioLicenseSrv.exe
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\regapi.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\msutb.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\mciwave.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\mciseq.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\mcicda.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\xpsservices.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\rtutils.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\rdpviewerax.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\rasmans.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\puiobj.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\puiapi.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\printui.exe
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\icsunattend.exe
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\findnetprinters.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\compstui.dll
2020-02-12 18:57:31 ----A---- C:\WINDOWS\system32\comctl32.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\SYSWOW64\NetDriverInstall.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\wow64.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\netlogon.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\NetDriverInstall.dll
2020-02-12 18:57:30 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2020-02-12 18:57:29 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\wersvc.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\WerFault.exe
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\Websocket.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\webio.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\runexehelper.exe
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\lsasrv.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\logoncli.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\keyiso.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\hal.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\Faultrep.dll
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\drivers\http.sys
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2020-02-12 18:57:28 ----A---- C:\WINDOWS\system32\ci.dll
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\twinapi.dll
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\sppcext.dll
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\regapi.dll
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\pidgenx.dll
2020-02-12 18:57:27 ----A---- C:\WINDOWS\system32\msutb.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\wimserv.exe
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\wimgapi.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\invagent.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\appraiser.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\aeinv.dll
2020-02-12 18:57:26 ----A---- C:\WINDOWS\system32\acmigration.dll
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\UsoClient.exe
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\usoapi.dll
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\NotificationController.dll
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2020-02-12 18:57:25 ----A---- C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\Winlangdb.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\WaaSMedicPS.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\rdpbase.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\kerberos.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\globinputhost.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\drivers\bindflt.sys
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\bindflt.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\BCP47mrm.dll
2020-02-12 18:57:24 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2020-02-12 18:57:23 ----A---- C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-02-12 18:57:23 ----A---- C:\WINDOWS\system32\ISM.dll
2020-02-12 18:57:22 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2020-02-12 18:57:22 ----A---- C:\WINDOWS\system32\dosvc.dll
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\wups2.dll
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\wuaueng.dll
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\wuauclt.exe
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-02-12 18:57:19 ----A---- C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\dstokenclean.exe
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\dssvc.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\cloudAP.dll
2020-02-12 18:57:18 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2020-02-12 18:57:17 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-12 18:57:17 ----A---- C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-02-12 18:57:17 ----A---- C:\WINDOWS\system32\StartTileData.dll
2020-02-12 18:57:17 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-02-12 18:57:17 ----A---- C:\WINDOWS\system32\ReAgent.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\mciwave.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\mciseq.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\mcicda.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\audiosrv.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\AudioSes.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\audioresourceregistrar.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\AudioEng.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\audiodg.exe
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\agentactivationruntime.dll
2020-02-12 18:57:16 ----A---- C:\WINDOWS\system32\AarSvc.dll
2020-01-15 20:12:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2020-01-15 20:12:32 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-01-15 20:12:31 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2020-01-15 20:12:30 ----A---- C:\WINDOWS\SYSWOW64\wiatrace.dll
2020-01-15 20:12:30 ----A---- C:\WINDOWS\SYSWOW64\wiadss.dll
2020-01-15 20:12:30 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2020-01-15 20:12:29 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2020-01-15 20:12:29 ----A---- C:\WINDOWS\system32\tsmf.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\wiatrace.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\wiaservc.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\wiarpc.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\wiadss.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\wiaaut.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\sti_ci.dll
2020-01-15 20:12:27 ----A---- C:\WINDOWS\system32\sti.dll
2020-01-15 20:12:26 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2020-01-15 20:12:25 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2020-01-15 20:12:24 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2020-01-15 20:12:24 ----A---- C:\WINDOWS\system32\crypt32.dll
2020-01-15 20:12:24 ----A---- C:\WINDOWS\system32\ConhostV1.dll
2020-01-15 20:12:24 ----A---- C:\WINDOWS\system32\clfsw32.dll

======List of files/folders modified in the last 2 months======

2020-03-12 17:40:34 ----RD---- C:\Program Files
2020-03-12 17:40:23 ----D---- C:\Users\Soki\AppData\Roaming\uTorrent
2020-03-12 17:37:24 ----SHD---- C:\WINDOWS\Installer
2020-03-12 17:37:24 ----SHD---- C:\Config.Msi
2020-03-12 17:37:24 ----RD---- C:\Program Files (x86)
2020-03-12 17:37:24 ----D---- C:\WINDOWS\Temp
2020-03-12 17:37:17 ----D---- C:\WINDOWS\System32
2020-03-12 17:37:12 ----D---- C:\WINDOWS\SysWOW64
2020-03-12 17:27:15 ----SHD---- C:\System Volume Information
2020-03-12 17:20:49 ----D---- C:\WINDOWS\Prefetch
2020-03-12 17:20:03 ----D---- C:\WINDOWS\system32\Tasks
2020-03-12 17:18:24 ----SD---- C:\Users\Soki\AppData\Roaming\Microsoft
2020-03-12 17:18:24 ----HD---- C:\ProgramData
2020-03-12 17:18:21 ----D---- C:\Windows
2020-03-12 17:11:00 ----D---- C:\WINDOWS\system32\sru
2020-03-12 16:45:49 ----D---- C:\WINDOWS\system32\SleepStudy
2020-03-12 14:39:38 ----RD---- C:\WINDOWS\Microsoft.NET
2020-03-12 14:17:19 ----RSD---- C:\WINDOWS\Fonts
2020-03-12 14:14:11 ----D---- C:\WINDOWS\INF
2020-03-12 14:14:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2020-03-12 14:13:02 ----D---- C:\Users\Soki\AppData\Roaming\vlc
2020-03-12 14:08:14 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2020-03-12 14:08:11 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-03-12 14:07:42 ----D---- C:\AdwCleaner
2020-03-12 08:22:10 ----D---- C:\WINDOWS\system32\config
2020-03-12 00:09:06 ----D---- C:\WINDOWS\WinSxS
2020-03-12 00:08:59 ----D---- C:\WINDOWS\system32\DriverStore
2020-03-12 00:08:52 ----D---- C:\WINDOWS\system32\drivers
2020-03-12 00:08:52 ----D---- C:\Program Files\Opera
2020-03-12 00:08:44 ----D---- C:\WINDOWS\system32\catroot2
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\setup
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\migration
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\en-US
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\drivers
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\Dism
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2020-03-12 00:08:30 ----D---- C:\WINDOWS\SystemResources
2020-03-12 00:08:29 ----SD---- C:\WINDOWS\system32\DiagSvcs
2020-03-12 00:08:29 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\wbem
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\setup
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\oobe
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\migration
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\en-US
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\Dism
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\cs-CZ
2020-03-12 00:08:29 ----D---- C:\WINDOWS\system32\Boot
2020-03-12 00:08:29 ----D---- C:\WINDOWS\ShellExperiences
2020-03-12 00:08:29 ----D---- C:\WINDOWS\servicing
2020-03-12 00:08:29 ----D---- C:\WINDOWS\bcastdvr
2020-03-12 00:08:29 ----D---- C:\WINDOWS\apppatch
2020-03-12 00:08:29 ----D---- C:\Program Files\Windows Defender
2020-03-12 00:08:27 ----D---- C:\WINDOWS\system32\drivers\UMDF
2020-03-11 23:46:04 ----HD---- C:\Program Files\WindowsApps
2020-03-11 23:40:33 ----D---- C:\WINDOWS\system32\MRT
2020-03-11 23:40:31 ----AC---- C:\WINDOWS\system32\MRT.exe
2020-03-11 23:40:28 ----D---- C:\WINDOWS\CbsTemp
2020-03-11 09:53:02 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2020-03-11 09:53:02 ----D---- C:\WINDOWS\system32\Macromed
2020-03-10 10:43:28 ----D---- C:\WINDOWS\AppReadiness
2020-03-08 00:30:22 ----D---- C:\Program Files (x86)\Microsoft Office
2020-03-03 16:26:52 ----D---- C:\WINDOWS\system32\WDI
2020-03-03 16:25:14 ----D---- C:\Program Files\AMD
2020-03-03 16:21:53 ----D---- C:\AMD
2020-02-27 19:50:48 ----D---- C:\ProgramData\Packages
2020-02-27 19:45:43 ----D---- C:\WINDOWS\system32\CatRoot
2020-02-27 19:45:30 ----D---- C:\Program Files\Common Files
2020-02-27 19:45:21 ----D---- C:\Program Files (x86)\Common Files
2020-02-27 19:10:22 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2020-02-27 19:10:10 ----A---- C:\WINDOWS\system32\amdihk64.dll
2020-02-22 00:10:50 ----D---- C:\Program Files (x86)\Steam
2020-02-13 15:24:30 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2020-02-13 00:26:20 ----D---- C:\WINDOWS\SYSWOW64\oobe
2020-02-13 00:26:19 ----RD---- C:\WINDOWS\PrintDialog
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\PerceptionSimulation
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\ja-jp
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\fr-FR
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\fr-CA
2020-02-13 00:26:19 ----D---- C:\WINDOWS\system32\de-DE
2020-02-13 00:26:19 ----D---- C:\Program Files\Internet Explorer
2020-02-13 00:26:19 ----D---- C:\Program Files (x86)\Internet Explorer
2020-02-03 21:56:32 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2020-01-18 13:05:49 ----RSD---- C:\WINDOWS\assembly
2020-01-15 20:53:15 ----SD---- C:\WINDOWS\system32\UNP
2020-01-15 20:53:15 ----D---- C:\WINDOWS\twain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2017-04-19 1469952]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2019-03-19 56632]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2019-03-19 89096]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2020-03-11 40960]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2019-03-19 70456]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2019-03-19 59392]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2019-03-19 8704]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2020-03-11 457216]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2019-03-19 53760]
R3 amdkmdag;amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\u0352262.inf_amd64_5771e42c4840fa20\B352258\atikmdag.sys [2020-02-27 65731712]
R3 amdkmdap;amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\u0352262.inf_amd64_5771e42c4840fa20\B352258\atikmpag.sys [2020-02-27 590464]
R3 AppShopDrv103;AppShopDrv103; \??\C:\WINDOWS\SysWOW64\Drivers\AppShopDrv103.sys [2020-03-12 34568]
R3 AtiHDAudioService;@oem29.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2019-07-24 108152]
R3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2020-02-12 117264]
R3 dtlitescsibus;@oem5.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-07-12 30264]
R3 dtliteusbbus;@oem20.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-07-12 47672]
R3 e1i65x64;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i65x64.sys [2019-03-19 553984]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2019-03-19 7964208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-07-15 4545240]
R3 IntcDAud;@oem31.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\System32\drivers\IntcDAud.sys [2018-05-09 480176]
R3 MEIx64;@oem16.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-09-06 204896]
R3 pimoukbd;@oem4.inf,%DeviceDescription%;Pluralinput Mouse; C:\WINDOWS\System32\drivers\pimoukbd.sys [2019-10-14 38296]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2019-03-19 42808]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2019-03-19 319528]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2019-03-19 885048]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2019-03-19 148520]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2019-03-19 124448]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2019-03-19 128528]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2019-03-19 75280]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2019-03-19 94736]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2019-03-19 58896]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2019-03-19 68624]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2019-03-19 41784]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2019-03-19 151352]
S0 SmartSAMD;SmartSAMD; C:\WINDOWS\System32\drivers\SmartSAMD.sys [2019-03-19 220176]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2019-03-19 20992]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\WINDOWS\system32\drivers\Acx01000.sys [2020-03-11 337920]
S3 amdgpio2;@amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\WINDOWS\System32\drivers\amdgpio2.sys [2019-03-19 18432]
S3 amdi2c;@amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\WINDOWS\System32\drivers\amdi2c.sys [2019-03-19 37888]
S3 AppleKmdfFilter;@oem21.inf,%AppleKmdfFilterDisplayName%;Apple KMDF Filter Driver; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [2018-05-10 20640]
S3 AppleLowerFilter;@oem21.inf,%AppleLowerFilterDisplayName%;Apple Lower Filter Driver; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [2018-05-10 35560]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2019-11-13 18432]
S3 AsrDrv101;AsrDrv101; \??\C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [2018-07-10 22280]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\WINDOWS\System32\drivers\BthA2dp.sys [2019-09-10 231936]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2020-03-11 114688]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2019-03-19 97280]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\WINDOWS\System32\drivers\BTHMINI.sys [2020-03-11 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2020-03-11 1428992]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2020-03-11 99328]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2019-03-19 43008]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2019-03-19 64312]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys [2019-09-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2019-03-19 53560]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\WINDOWS\System32\drivers\hidspi.sys [2019-10-10 64000]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2020-02-12 84496]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2019-03-19 28672]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2019-03-19 1866768]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2019-03-19 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2019-03-19 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2019-03-19 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-03-19 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-03-19 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-03-19 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2019-03-19 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-03-19 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-03-19 180736]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-03-19 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2019-03-19 566800]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2019-03-19 46592]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel Power Limit Driver; C:\WINDOWS\System32\drivers\intelpmax.sys [2019-03-19 28672]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2019-03-19 54584]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2019-03-19 535864]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2019-03-19 62264]
S3 MbbCx;MBB Network Adapter Class Extension; C:\WINDOWS\system32\drivers\MbbCx.sys [2019-11-13 359424]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-03-19 64512]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2019-03-19 1150480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2019-03-19 153616]
S3 NDKPing;NDKPing Driver; C:\WINDOWS\system32\drivers\NDKPing.sys [2019-03-19 63488]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2019-03-19 187904]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2019-03-19 158520]
S3 PktMon;Packet Monitor Driver; C:\WINDOWS\system32\drivers\PktMon.sys [2019-03-19 96056]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2019-03-19 127800]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2019-03-19 17408]
S3 portcfg;portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [2019-03-19 25600]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2019-12-12 986936]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2019-03-19 211456]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2019-03-19 113152]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2019-03-19 33592]
S3 semav6msr64;semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [2019-08-16 41816]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2019-03-19 32568]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2019-09-10 88136]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0352262.inf_amd64_5771e42c4840fa20\B352258\atiesrxx.exe [2020-02-27 523096]
R2 AUEPLauncher;AMD User Experience Program Launcher; C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPLauncher.exe [2020-02-26 58984]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 CDPUserSvc_3e033;CDPUserSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2020-02-29 11091224]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2017-04-19 18504]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2019-03-19 355872]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2015-05-07 272352]
R2 KMSEmulator;KMSEmulator; C:\Windows\KMS\bin\KMSSS.exe [2015-01-14 297472]
R2 McAfee WebAdvisor;McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [2020-03-10 907224]
R2 OneSyncSvc_3e033;OneSyncSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-05-22 294616]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2019-03-19 263904]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R3 cbdhsvc_3e033;cbdhsvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2018-06-20 3606632]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-07-27 43704]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
R3 PimIndexMaintenanceSvc_3e033;PimIndexMaintenanceSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2020-03-11 929144]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc_3e033;AarSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-03-11 335416]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService_3e033;BcastDVRUserService_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService_3e033;BluetoothUserService_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService_3e033;CaptureService_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc_3e033;ConsentUxUserSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2019-03-19 378400]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 CredentialEnrollmentManagerUserSvc_3e033;CredentialEnrollmentManagerUserSvc_3e033; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DeviceAssociationBrokerSvc_3e033;DeviceAssociationBrokerSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc_3e033;DevicePickerUserSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc_3e033;DevicesFlowUserSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2020-03-11 97792]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.90\elevation_service.exe [2019-09-18 1106416]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService_3e033;MessagingService_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2019-10-11 242720]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2002-02-01 214832]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [2019-03-19 103424]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc_3e033;PrintWorkflowUserSvc_3e033; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2019-03-19 1264128]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-03-19 53744]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-03-19 53744]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“