Stránka 1 z 1

Preventivní kontrola logu

Napsal: 16 srp 2016 08:04
od Mine.
Dobrý den, prosím o preventivní kontrolu logu.

Re: Preventivní kontrola logu

Napsal: 17 srp 2016 16:46
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Preventivní kontrola logu

Napsal: 18 srp 2016 22:39
od Mine.
Před vyčištěním se počítač restartoval. Můžu se zeptat, jestli je nějaká infekce? Přihlašoval jsem se na Steam, tak jen ať vím, že se nemusím bát :)

# AdwCleaner v6.000 - Logfile created 18/08/2016 at 23:28:30
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-08-18.2 [Server]
# Operating System : Windows 10 Pro (X64)
# Username : Admin - ZALMANR1
# Running from : C:\Users\Admin\Desktop\adwcleaner_6.000.exe
# Mode: Clean
# Support : https://toolslib.net/forum



***** [ Services ] *****



***** [ Folders ] *****

[-] Folder deleted: C:\Users\Public\Documents\Downloaded Installers


***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}


***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [891 Bytes] - [18/08/2016 23:28:30]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1109 Bytes] ##########

Re: Preventivní kontrola logu

Napsal: 19 srp 2016 17:15
od Rudy
Dejte nový log FRST.

Re: Preventivní kontrola logu

Napsal: 10 zář 2016 18:37
od Mine.
.

Re: Preventivní kontrola logu

Napsal: 10 zář 2016 19:06
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2560372422-2021965399-549226919-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]
C:\WINDOWS\system32\F76D.tmp
C:\WINDOWS\system32\2DAB.tmp
C:\WINDOWS\system32\SET660B.tmp
C:\WINDOWS\SysWOW64\SET7FA6.tmp
C:\WINDOWS\SysWOW64\SETBC6F.tmp
C:\WINDOWS\system32\SET98E5.tmp
C:\WINDOWS\SysWOW64\SET7A16.tmp
C:\WINDOWS\SysWOW64\SETBBA2.tmp
C:\WINDOWS\SysWOW64\SET8637.tmp
C:\WINDOWS\system32\SET99D3.tmp
C:\WINDOWS\SysWOW64\SET9BF9.tmp
C:\WINDOWS\system32\SETBE0D.tmp
C:\WINDOWS\system32\Drivers\SET62DA.tmp
C:\WINDOWS\system32\Drivers\SET9884.tmp
C:\WINDOWS\system32\SET788D.tmp
C:\Users\Admin\AppData\Local\Temp
C:\ProgramData\DP45977C.lfl
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\WINDOWS\system32\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\amdave64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdgfxinfo64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdhcp64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdhdl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdlvr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmantle64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmcl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmiracast.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmmcl6.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdocl12cl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdoclvp9lib64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdpcom64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdvlk64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdxc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amfrt64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\AppXApplicabilityBlob.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atiadlxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\aticalcl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticaldd64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticalrt64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticfx64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atidemgy.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atidxx64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atieah64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atieclxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atiesrxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atig6pxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atig6txx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiglpxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atimpc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atimuixx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atio6axx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\ATIODCLI.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ATIODE.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atisamu64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atitmm64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiu9p64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiumd64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiumd6a.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiuxp64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CastLaunch.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\cdd.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Chakra.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Chakradiag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ClipUp.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CloudExperienceHostUser.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coin95ip.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coin95itp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coinst_16.30.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\dgtrayicon.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\DscCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\facecredentialprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\FrameServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\fveapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\fveapibase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\GameManager64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hsa-thunk64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\hvax64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvix64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvloader.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvloader.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\kdhvcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\KnobsCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\KnobsCsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\LicenseManagerSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mantle64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\mantleaxl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MusNotification.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MusUpdateHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\NetworkMobileSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\NFCProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\OpenCL.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\provdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provhandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provisioningcsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provops.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ProvPluginEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provtool.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_nt.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\shutdownux.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\usocore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo-1-1-0-17-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01011.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\win32kfull.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wincorlib.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Editing.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Search.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winload.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winload.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winresume.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winresume.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuauclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuuhext.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wwanprotdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wwansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\XblAuthManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aclui.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdave32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdgfxinfo32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdhcp32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdhdl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdlvr32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmantle32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmcl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmmcl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdocl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdocl12cl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdpcom32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdvlk32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdxc32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amfrt32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiadlxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiadlxy.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticalcl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticaldd.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticalrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticfx32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atidxx32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atieah32.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atigktxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiglpxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atimpc32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atioglxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atisamu32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiu9pag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiumdag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiumdva.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiuxpag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\BcastDVRHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakra.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakradiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\delegatorprovider.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\GameManager32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\hsa-thunk.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mantle32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mantleaxl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\OpenCL.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-17-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\win32kfull.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\amdacpksd.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ati2erec.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\atikmdag.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ClipSp.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgkrnl.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms1.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms2.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ggflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ggsomc.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\hvservice.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandbus64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lganddiag64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandgps64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetbus64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag264.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetgps64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64diag.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64gps.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ntfs.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\nuidfltr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\pdc.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cr.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016unic.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ebus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ecm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ecmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3emgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3eobex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ewh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ewhnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tcpip.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\xinputhid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\Crysis3.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\metro.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\OOSU10.exe:$CmdZnID [29]
AlternateDataStreams: C:\Users\Admin\Desktop\procexp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\procexp.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe:$CmdZnID [29]
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125]

ResetHosts:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Preventivní kontrola logu

Napsal: 13 zář 2016 22:37
od Mine.
Fix result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016
Ran by Admin (12-09-2016 01:22:34) Run:1
Running from C:\Users\Admin\Desktop
Loaded Profiles: Admin (Available Profiles: Admin & Baruška)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2560372422-2021965399-549226919-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]
C:\WINDOWS\system32\F76D.tmp
C:\WINDOWS\system32\2DAB.tmp
C:\WINDOWS\system32\SET660B.tmp
C:\WINDOWS\SysWOW64\SET7FA6.tmp
C:\WINDOWS\SysWOW64\SETBC6F.tmp
C:\WINDOWS\system32\SET98E5.tmp
C:\WINDOWS\SysWOW64\SET7A16.tmp
C:\WINDOWS\SysWOW64\SETBBA2.tmp
C:\WINDOWS\SysWOW64\SET8637.tmp
C:\WINDOWS\system32\SET99D3.tmp
C:\WINDOWS\SysWOW64\SET9BF9.tmp
C:\WINDOWS\system32\SETBE0D.tmp
C:\WINDOWS\system32\Drivers\SET62DA.tmp
C:\WINDOWS\system32\Drivers\SET9884.tmp
C:\WINDOWS\system32\SET788D.tmp
C:\Users\Admin\AppData\Local\Temp
C:\ProgramData\DP45977C.lfl
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\WINDOWS\system32\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\amdave64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdgfxinfo64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdhcp64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdhdl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdlvr64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmantle64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmcl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmiracast.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdmmcl6.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdocl12cl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdoclvp9lib64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdpcom64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdvlk64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amdxc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\amfrt64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\AppXApplicabilityBlob.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AppXDeploymentServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atiadlxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiapfxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\aticalcl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticaldd64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticalrt64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\aticfx64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atidemgy.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atidxx64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atieah64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atieclxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atiesrxx.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atig6pxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atig6txx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiglpxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atimpc64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atimuixx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atio6axx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\ATIODCLI.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ATIODE.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\atisamu64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atitmm64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiu9p64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiumd64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiumd6a.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\atiuxp64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CastLaunch.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\cdd.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Chakra.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Chakradiag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\clinfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ClipUp.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CloudExperienceHostUser.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coin95ip.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coin95itp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\coinst_16.30.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\dgtrayicon.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\DscCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\facecredentialprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\FrameServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\fveapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\fveapibase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\GameManager64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hsa-thunk64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\hvax64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvix64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvloader.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hvloader.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\kdhvcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\KnobsCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\KnobsCsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\LicenseManagerSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mantle64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\mantleaxl64.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MusNotification.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MusUpdateHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\NetworkMobileSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\NFCProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ntoskrnl.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\OpenCL.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\provdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provhandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provisioningcsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provops.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ProvPluginEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\provtool.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_nt.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\shutdownux.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\usocore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo-1-1-0-17-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01011.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\win32kfull.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wincorlib.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Editing.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Search.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winload.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winload.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winresume.efi:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\winresume.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuauclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wuuhext.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wwanprotdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wwansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\XblAuthManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aclui.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdave32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdgfxinfo32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdhcp32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdhdl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdlvr32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmantle32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmcl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdmmcl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdocl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdocl12cl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdpcom32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdvlk32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amdxc32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\amfrt32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiadlxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiadlxy.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticalcl.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticaldd.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticalrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\aticfx32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atidxx32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atieah32.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atigktxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiglpxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atimpc32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atioglxx.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atisamu32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiu9pag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiumdag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiumdva.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\atiuxpag.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\bcastdvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\BcastDVRHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakra.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakradiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Chakrathunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ClipboardServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\CredProvDataModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\c_GSM7.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\D3D12.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\delegatorprovider.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\edgehtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\FSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\GameManager32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\GamePanel.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\hsa-thunk.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\InstallAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\LicenseManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mantle32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mantleaxl32.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\MCRecvSrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfksproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsensorgroup.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mispace.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\OpenCL.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\schannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\StoreAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\updatepolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-17-0.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\win32kfull.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\windows.storage.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\wsp_health.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\a016whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\amdacpksd.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ati2erec.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\atikmdag.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\atikmpag.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ClipSp.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgkrnl.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms1.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\dxgmms2.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ggflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ggsomc.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\hvservice.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandbus64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lganddiag64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandgps64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetbus64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag264.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgandnetgps64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64diag.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\lgx64gps.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ntfs.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\nuidfltr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\pdc.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016cr.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016unic.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0016whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s0017whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1018whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1029whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039cr.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039unic.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s1039whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916cm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916cmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916mgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916obex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916wh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\s916whnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ebus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ecm.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ecmnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3emgmt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3eobex.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ewh.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\se3ewhnt.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tcpip.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\xinputhid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\Crysis3.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\metro.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\OOSU10.exe:$CmdZnID [29]
AlternateDataStreams: C:\Users\Admin\Desktop\procexp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\procexp.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe:$CmdZnID [29]
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125]

ResetHosts:
End
*****************

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => key removed successfully
HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => key removed successfully
HKCR\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => key removed successfully
HKCR\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => key removed successfully
HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => key removed successfully
HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => key removed successfully
HKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => key removed successfully
HKCR\Wow6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => key removed successfully
HKCR\Wow6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => key removed successfully
HKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => key removed successfully
HKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
HKU\S-1-5-21-2560372422-2021965399-549226919-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
efavdrv => service removed successfully
C:\WINDOWS\system32\F76D.tmp => moved successfully
C:\WINDOWS\system32\2DAB.tmp => moved successfully
C:\WINDOWS\system32\SET660B.tmp => moved successfully
C:\WINDOWS\SysWOW64\SET7FA6.tmp => moved successfully
C:\WINDOWS\SysWOW64\SETBC6F.tmp => moved successfully
C:\WINDOWS\system32\SET98E5.tmp => moved successfully
C:\WINDOWS\SysWOW64\SET7A16.tmp => moved successfully
C:\WINDOWS\SysWOW64\SETBBA2.tmp => moved successfully
C:\WINDOWS\SysWOW64\SET8637.tmp => moved successfully
C:\WINDOWS\system32\SET99D3.tmp => moved successfully
C:\WINDOWS\SysWOW64\SET9BF9.tmp => moved successfully
C:\WINDOWS\system32\SETBE0D.tmp => moved successfully
C:\WINDOWS\system32\Drivers\SET62DA.tmp => moved successfully
C:\WINDOWS\system32\Drivers\SET9884.tmp => moved successfully
C:\WINDOWS\system32\SET788D.tmp => moved successfully

"C:\Users\Admin\AppData\Local\Temp" folder move:

Could not move "C:\Users\Admin\AppData\Local\Temp" => Scheduled to move on reboot.

C:\ProgramData\DP45977C.lfl => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"C:\WINDOWS\system32\aclui.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdave64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdgfxinfo64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdhcp64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdhdl64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdlvr64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdmantle64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdmcl64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdmiracast.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdmmcl6.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdocl12cl64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdoclvp9lib64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdpcom64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdvlk64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amdxc64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\amfrt64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\AppXApplicabilityBlob.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\AppXDeploymentServer.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiadlxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiapfxx.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\aticalcl64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\aticaldd64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\aticalrt64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\aticfx64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atidemgy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atidxx64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atieah64.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atieclxx.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiesrxx.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atig6pxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atig6txx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiglpxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atimpc64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atimuixx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atio6axx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ATIODCLI.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ATIODE.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atisamu64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atitmm64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiu9p64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiumd64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiumd6a.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\atiuxp64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\AudioSes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\audiosrv.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\bcastdvr.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\CastLaunch.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\cdd.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Chakra.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Chakradiag.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Chakrathunk.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\clinfo.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ClipboardServer.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ClipUp.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\CloudExperienceHostUser.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\clusapi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\coin95ip.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\coin95itp.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\coinst_16.30.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\combase.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\CredProvDataModel.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\C_G18030.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\c_GSM7.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\C_IS2022.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\D3D12.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\delegatorprovider.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\detoured.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\dgtrayicon.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\DscCore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\DscCoreConfProv.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\dwmcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\edgehtml.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\encapi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\facecredentialprovider.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\FrameServer.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\FSClient.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\fveapi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\fveapibase.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\GameManager64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\GamePanel.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\hsa-thunk64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\hvax64.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\hvix64.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\hvloader.efi" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\hvloader.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\indexeddbserver.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\InstallAgent.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\InstallAgentUserBroker.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\kdhvcom.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\KnobsCore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\KnobsCsp.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\LicenseManager.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\LicenseManagerSvc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mantle64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mantleaxl64.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\MCRecvSrc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfksproxy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfnetcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfnetsrc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfps.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mfsensorgroup.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mispace.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\msctf.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mshtml.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\mstsc.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\MusNotification.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\MusUpdateHandlers.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\NetworkMobileSettings.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\NFCProvisioningPlugin.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ntdll.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ntoskrnl.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\OpenCL.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provdatastore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provengine.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provhandlers.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provisioningcsp.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provops.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\ProvPluginEng.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\provtool.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\schannel.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\SettingsHandlers_nt.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\shell32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\shutdownux.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\smphost.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\storagewmi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\storagewmi_passthru.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\StoreAgent.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\twinui.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\updatepolicy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\usocore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\vulkaninfo-1-1-0-17-0.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\vulkaninfo.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\WdfCoInstaller01009.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\WdfCoInstaller01011.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\win32kfull.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wincorlib.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Media.Audio.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Media.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Media.Editing.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Media.Speech.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\windows.storage.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.UI.Logon.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.UI.Search.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\winload.efi" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\winload.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\winresume.efi" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\winresume.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\WinTypes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wsp_fs.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wsp_health.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wuauclt.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wuaueng.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wups2.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wuuhext.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\WWAHost.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wwanprotdim.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\wwansvc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\XblAuthManager.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\aclui.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdave32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdgfxinfo32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdhcp32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdhdl32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdlvr32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdmantle32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdmcl32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdmmcl.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdocl.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdocl12cl.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdpcom32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdvlk32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amdxc32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\amfrt32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiadlxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiadlxy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\aticalcl.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\aticaldd.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\aticalrt.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\aticfx32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atidxx32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atieah32.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atigktxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiglpxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atimpc32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atioglxx.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atisamu32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiu9pag.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiumdag.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiumdva.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\atiuxpag.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\AudioSes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\bcastdvr.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\BcastDVRHelper.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Chakra.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Chakradiag.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Chakrathunk.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\ClipboardServer.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\clusapi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\combase.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\CredProvDataModel.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\C_G18030.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\c_GSM7.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\C_IS2022.DLL" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\D3D12.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\delegatorprovider.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\detoured.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\DscCoreConfProv.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\dwmcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\edgehtml.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\encapi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\FlashPlayerApp.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\FSClient.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\GameManager32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\GamePanel.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\hsa-thunk.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\indexeddbserver.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\InstallAgent.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\LicenseManager.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mantle32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mantleaxl32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\MCRecvSrc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfksproxy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfnetcore.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfnetsrc.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfps.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mfsensorgroup.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mispace.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\msctf.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mshtml.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\mstsc.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\ntdll.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\OpenCL.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\schannel.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\shell32.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\smphost.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\storagewmi.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\storagewmi_passthru.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\StoreAgent.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\twinui.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\updatepolicy.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-17-0.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\vulkaninfo.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\win32kfull.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\wincorlib.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.Media.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\windows.storage.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\WinTypes.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\wsp_fs.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\wsp_health.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\SysWOW64\WWAHost.exe" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\a016whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\amdacpksd.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ati2erec.dll" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\atikmdag.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\atikmpag.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ClipSp.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\dxgkrnl.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\dxgmms1.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\dxgmms2.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ggflt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ggsomc.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\hvservice.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandbus64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lganddiag64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandgps64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandnetbus64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandnetdiag264.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgandnetgps64.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgx64bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgx64diag.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\lgx64gps.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ntfs.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\nuidfltr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\pdc.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016cr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016unic.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0016whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017cr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017unic.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s0017whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018cr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018unic.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1018whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029cr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029unic.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1029whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039cr.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039unic.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s1039whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916bus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916cm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916cmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916mgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916obex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916wh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\s916whnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3ebus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3ecm.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3ecmnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3emgmt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3eobex.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3ewh.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\se3ewhnt.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\ssudbus.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\tcpip.sys" => ":$CmdTcID" ADS not found.
"C:\WINDOWS\system32\Drivers\xinputhid.sys" => ":$CmdTcID" ADS not found.
"C:\Users\Admin\Desktop\Crysis3.exe" => ":$CmdTcID" ADS not found.
"C:\Users\Admin\Desktop\FRST64.exe" => ":$CmdTcID" ADS not found.
"C:\Users\Admin\Desktop\metro.exe" => ":$CmdTcID" ADS not found.
C:\Users\Admin\Desktop\OOSU10.exe => ":$CmdZnID" ADS removed successfully.
"C:\Users\Admin\Desktop\procexp.exe" => ":$CmdTcID" ADS not found.
C:\Users\Admin\Desktop\procexp.exe => ":$CmdZnID" ADS removed successfully.
"C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe" => ":$CmdTcID" ADS not found.
C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe => ":$CmdZnID" ADS removed successfully.
C:\ProgramData\TEMP => ":5C321E34" ADS removed successfully.
ResetHosts: => Error: No automatic fix found for this entry.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 12-09-2016 01:23:57)

C:\Users\Admin\AppData\Local\Temp => moved successfully

==== End of Fixlog 01:23:58 ====

Re: Preventivní kontrola logu

Napsal: 13 zář 2016 22:38
od Mine.
Všiml jsem si, že nálezů bylo více, může se zeptat, o co se jednalo :)? Infekce?

Re: Preventivní kontrola logu

Napsal: 14 zář 2016 17:50
od Rudy
ADW smazal AdWary a dočištění FRST převážně zbytečnosti.

Re: Preventivní kontrola logu

Napsal: 14 zář 2016 19:09
od Mine.
Rudy píše:ADW smazal AdWary a dočištění FRST převážně zbytečnosti.
Děkuji. Takže nic "hrozného," jestli to chápu dobře :) Je to všechno, nebo je ještě něco potřeba?

Re: Preventivní kontrola logu

Napsal: 14 zář 2016 19:19
od Rudy
Není zač! Běžné šmejdíky. Pokud není jiný problém, je to vše. :)