VIRY.CZ

Dobrý den,
mám problém s internetem, jsem připojen s modemem přes Lan Cabel, internet mi padá na cca 2 vteřiny každou hodinu +-, Nevím co s tím je, zkoušel jsem restart routeru, odpojení cabulu a nic, zde je log:

Logfile of random's system information tool 1.14 (written by random/random)
Run by Filip at 2016-10-29 16:31:56
Microsoft Windows 10 Home
System drive C: has 44 GB (18%) free of 238 GB
Total RAM: 16307 MB (69% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:32:06, on 29.10.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Filip\AppData\Local\Microsoft\OneDrive\OneDrive.exe
D:\Steam\Steam.exe
D:\Steam\bin\cef\cef.winxp\steamwebhelper.exe
C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe
C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe
C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Steam\bin\cef\cef.winxp\steamwebhelper.exe
C:\Users\Filip\Desktop\OSBuddy.exe
C:\Users\Filip\Desktop\OSBuddy.exe
C:\Program Files\trend micro\Filip_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Filip\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKCU\..\Run: [BloodyToneMaker] "C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe" Minimum
O4 - HKCU\..\Run: [BloodyKeyboard] "C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Logitech Gaming Registry Service (LogiRegistryService) - Logitech Inc. - C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - CyberLink - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10975 bytes

======Enumerating Processes======

C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\dwm.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\WINDOWS\system32\nvvsvc.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe"
"C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\dashost.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\taskhostw.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=53.0.2785.143 --handshake-handle=0x1c0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3608.0.428820203\400655347" --mojo-application-channel-token=5F3D88448F3A5234BCF351BDC233F2D6 --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,14,18,31,56,70 --gpu-vendor-id=0x10de --gpu-device-id=0x1401 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.7290 --gpu-driver-date=9-16-2016 --mojo-platform-channel-handle=1236 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=1E51D305B47DB6B0E564BFBECEDB3756 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=F1D8E3598228054B903B3A6D5B360FC7 --mojo-application-channel-token=1E51D305B47DB6B0E564BFBECEDB3756 --channel="3608.3.2144505026\1325935001" --mojo-platform-channel-handle=2748 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=8D498CCCC0E38CADC6F5AE0C07D5B0AF --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=5C280B95E054C4F60B9D4ADB1DAA753C --mojo-application-channel-token=8D498CCCC0E38CADC6F5AE0C07D5B0AF --channel="3608.4.1108547322\1034787005" --mojo-platform-channel-handle=2792 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=A8C1C17F13BB3CAF78E43DEEE7B6B04A --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=ABCF9D4498FE2D8D2F55EDC15C6D39D8 --mojo-application-channel-token=A8C1C17F13BB3CAF78E43DEEE7B6B04A --channel="3608.5.318146486\353057129" --mojo-platform-channel-handle=2796 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=F21144E6D63F448BFC7DF4281A71674D --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=FB97AAA3C5BC7CB58C4826FBA95E4B95 --mojo-application-channel-token=F21144E6D63F448BFC7DF4281A71674D --channel="3608.7.832771591\1733649828" --mojo-platform-channel-handle=5076 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --mojo-channel-token=D822C263D83D1574E3A784FF7AD8AB09 --ppapi-flash-args --lang=cs --device-scale-factor=1 --mojo-platform-channel-handle=7084 --ignored=" --type=renderer " /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=6EB47665AF51B60546DDF646C0E3700E --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=69D76D204F651EA3CED51FC60013A217 --mojo-application-channel-token=6EB47665AF51B60546DDF646C0E3700E --channel="3608.8.584319461\1662594174" --mojo-platform-channel-handle=5020 /prefetch:1
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C382CD1D050CB81DEAD1025AB8085056 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=AC3D96E4FB3D8AEE0FD1D896C92C98A7 --mojo-application-channel-token=C382CD1D050CB81DEAD1025AB8085056 --channel="3608.9.864452493\760636860" --mojo-platform-channel-handle=7596 /prefetch:1
"C:\Windows\SysWOW64\rundll32.exe" C:\WINDOWS\Syswow64\cm108.dll,CMICtrlWnd
"C:\Users\Filip\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"D:\Steam\Steam.exe" -silent
D:\Steam\bin\cef\cef.winxp\steamwebhelper.exe "-cachedir=C:\Users\Filip\AppData\Local\Steam\htmlcache" "-steampid=8732" "-buildid=1476379980" "-steamid=0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe"
C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
"C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe" Minimum
"C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\SDK\CM_LibraryIO.exe" Release
"C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" Minimum
"C:\Program Files (x86)\Glary Utilities 5\Integrator.exe" /autostart
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=0BB43B5428178C82402A5179910B04E8 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=B1B6AC88AC65EAA5E7E17E7A2F1F6AF4 --mojo-application-channel-token=0BB43B5428178C82402A5179910B04E8 --channel="3608.12.70044831\537977312" --mojo-platform-channel-handle=5952 /prefetch:1
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"D:\Steam\bin\cef\cef.winxp\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="D:\Steam\bin\cef\cef.winxp\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="8896.1.852956189\655320432" /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=85781F94FAF1D70D0AEC17F5C364DA4D --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=EB247C27C181555A86ADFD1B586F4D93 --mojo-application-channel-token=85781F94FAF1D70D0AEC17F5C364DA4D --channel="3608.19.413006987\1583491369" --mojo-platform-channel-handle=2052 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=843D8F859D64CED76BDC6F7C0BBE4771 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=6AF4A4B03CD896B23B59D2C3AAC9EED1 --mojo-application-channel-token=843D8F859D64CED76BDC6F7C0BBE4771 --channel="3608.22.503001265\190982830" --mojo-platform-channel-handle=5260 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=B47422B76A8BCEE878A7874E34EA7701 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=F4EF3B61340D4940331F9BB6FFDA2ACF --mojo-application-channel-token=B47422B76A8BCEE878A7874E34EA7701 --channel="3608.25.376426162\543284233" --mojo-platform-channel-handle=8496 /prefetch:1
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\WINDOWS\system32\AUDIODG.EXE 0x49c
"C:\Users\Filip\Desktop\OSBuddy.exe"
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
"C:\Users\Filip\Desktop\OSBuddy.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_29/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=8BB581B8FB3050493704E425B7FC3BC1 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=BF45607C763F68512D7E0EAB24DB2B4B --mojo-application-channel-token=8BB581B8FB3050493704E425B7FC3BC1 --channel="3608.76.1928409841\867567161" --mojo-platform-channel-handle=9856 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe35_ Global\UsGthrCtrlFltPipeMssGthrPipe35 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 648 652 660 8192 656
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Filip\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\GlaryInitialize 5 - C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GU5SkipUAC - C:\Program Files (x86)\Glary Utilities 5\Integrator.exe $(Arg0)
C:\WINDOWS\system32\tasks\klcp_update - "C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe" /verysilent /update /freq=30
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Filip\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\Overwolf Updater Task - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe /RunningFrom Schedule
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{6CF1923D-EF0D-42D4-A472-59939945A6A6} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval - C:\WINDOWS\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemovalTools\MRT_HB - C:\WINDOWS\system32\MRT.exe /EHB /Q
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.101.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=D:\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\addons.json
AdBlocker Lite - extension - jid1-dwtFBkQjb3SIQp@jetpack
Ghostery - extension - firefox@ghostery.com
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Adblock Edge - extension - {fe272bd1-5f76-4ea4-8501-a05d35d823fc}
Firefox Hello Beta (discontinued) - extension - loop@mozilla.org

C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\extensions.json
Adblock Edge - extension - {fe272bd1-5f76-4ea4-8501-a05d35d823fc} - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Ghostery - extension - firefox@ghostery.com - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\extensions\firefox@ghostery.com.xpi
AdBlock Lite - extension - jid1-dwtFBkQjb3SIQp@jetpack - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\extensions\jid1-dwtFBkQjb3SIQp@jetpack.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\pluginreg.dat
Plugin - VLC Web Plugin - 2.2.1.0 - D:\VLC\npvlc.dll
Plugin - Google Update - 1.3.31.5 - C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
Plugin - Java(TM) Platform SE 8 U101 - 11.101.2.13 - C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.1010.13 - 11.101.2.13 - C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npdeployJava1.dll

=========Google Chrome=========

C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension ajkomeiemllejmopbbjjngpmmikfedad
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bgjpfhpjcgdppjbgnpnjllokbmcdllig 1 Seznam Lištička - Email 1.3.14
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.12.4
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Vyhledávání Google 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension fdfmpladjpampdcaioopjjkohimaoheo 1 Youtube to Mp3 1.0.1
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension hgdohmjplligggendhbmghhmpphabopi 1 YouTube To MP3! 1.0.3.14
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension lkadffjmnaiokkdncgdlecdegajoiemi 0 Bleaner 0.1
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.0
Extension nlbejmccbhkncgokjcmghpfloaajcffj 0 Hotspot Shield Free VPN Proxy – Unblock Sites 2.0.50
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension ohmmkhmmmpcnpikjeljgnaoabkaalbgc
Extension olfeabkoenfaoljndfecamgilllcpiak 0 Seznam Lištička - Rychlá volba 1.7.13
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5316.725.0.15
Homepage: http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2FeM1NCLNCW8Iom8DuhzdaCi8_JT2h1-Ill7gcytlAxPT6aVPDnx7cb6clAQPLiIeSz3GvoWQcnuqIwv8a51l2cCLJWRG4206rj2R_PGTdzYLcWOQaRVI6hd1boDvjs_7V4W_vKRqPSzQ,,
default_search_provider.search_url:
C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-02 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-02 186944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-04-14 8801024]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-06-15 2398776]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-06-15 1767760]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2016-02-02 15112312]
"Cm108Sound"=C:\WINDOWS\syswow64\RunDll32.exe [2016-07-16 61952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Filip\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-09-25 633024]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2016-09-25 7943072]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-08-22 29544576]
"Steam"=D:\Steam\steam.exe [2016-10-13 2860832]
"Akamai NetSession Interface"=C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe [2015-09-10 4691384]
"GUDelayStartup"=C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [2016-10-09 43984]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2016-02-02 1283112]
"BloodyToneMaker"=C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe [2016-03-02 8473088]
"BloodyKeyboard"=C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe [2016-09-30 11683840]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"ADSKAppManager"=C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [2016-03-23 716224]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2014-09-11 2087264]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22 598552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath"=%SystemRoot%\inf\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.71\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-10-29 16:31:56 ----D---- C:\rsit
2016-10-29 16:31:56 ----D---- C:\Program Files\trend micro
2016-10-28 13:53:26 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-10-28 13:53:26 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-28 13:53:25 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-10-28 13:53:25 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-10-28 13:53:25 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-10-28 13:53:25 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-10-28 13:53:25 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-10-28 13:53:24 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-10-28 13:53:24 ----A---- C:\WINDOWS\system32\mfps.dll
2016-10-28 13:53:24 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-10-28 13:53:23 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-10-28 13:53:23 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-10-28 13:53:23 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-10-28 13:53:23 ----A---- C:\WINDOWS\system32\msctf.dll
2016-10-28 13:53:23 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-10-28 13:53:22 ----A---- C:\WINDOWS\system32\shell32.dll
2016-10-28 13:53:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-10-28 13:53:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-10-28 13:53:18 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-10-28 13:53:18 ----A---- C:\WINDOWS\system32\winresume.exe
2016-10-28 13:53:18 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\usocore.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\ole32.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\energy.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-10-28 13:53:17 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-10-28 13:53:16 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\user32.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-10-28 13:53:16 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-10-28 13:53:15 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-10-28 13:53:15 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-10-28 13:53:15 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-10-28 13:53:15 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-10-28 13:53:14 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-28 13:53:14 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-28 13:53:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-28 13:53:14 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-10-28 13:53:14 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-28 13:53:13 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-10-28 13:53:12 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-10-28 13:53:12 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-10-28 13:53:12 ----A---- C:\WINDOWS\system32\twinui.dll
2016-10-28 13:53:12 ----A---- C:\WINDOWS\explorer.exe
2016-10-28 13:53:11 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-10-28 13:53:11 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-10-28 13:53:11 ----A---- C:\WINDOWS\system32\winload.exe
2016-10-28 13:53:11 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\wpnprv.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-10-28 13:53:10 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\SYSWOW64\cmifw.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\taskbarcpl.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\sud.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\stobject.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\powercfg.exe
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\gameux.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\fontext.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\fhcpl.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\Display.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\DevicePairingFolder.dll
2016-10-28 13:53:09 ----A---- C:\WINDOWS\system32\autoplay.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\system32\wmp.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-10-28 13:53:08 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-10-28 13:53:07 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-10-28 13:53:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2016-10-28 13:53:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2016-10-28 13:53:07 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-10-28 13:53:07 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-10-28 13:53:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-10-28 13:53:06 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-10-28 13:53:06 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\mispace.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\devinv.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-10-28 13:53:05 ----A---- C:\WINDOWS\splwow64.exe
2016-10-28 13:53:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\wintrust.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\invagent.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\esent.dll
2016-10-28 13:53:04 ----A---- C:\WINDOWS\system32\aepic.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\weretw.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\wer.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-10-28 13:53:03 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2016-10-28 13:53:02 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\SYSWOW64\efsext.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\cmifw.dll
2016-10-28 13:53:02 ----A---- C:\WINDOWS\system32\authui.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2016-10-28 13:53:01 ----A---- C:\WINDOWS\SYSWOW64\chartv.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\SYSWOW64\esentutl.exe
2016-10-28 13:53:01 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\system32\wups.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\system32\chartv.dll
2016-10-28 13:53:01 ----A---- C:\WINDOWS\system32\esentutl.exe
2016-10-28 13:53:00 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-10-28 13:53:00 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2016-10-28 13:52:59 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-28 13:52:58 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-10-28 13:52:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-10-28 13:52:58 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-10-28 13:52:58 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-10-28 13:52:58 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-10-28 13:52:57 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2016-10-28 13:52:57 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-10-28 13:52:57 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-10-28 13:52:57 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-10-28 13:52:57 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-28 13:52:57 ----A---- C:\WINDOWS\system32\mos.dll
2016-10-28 13:52:57 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-28 13:52:56 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-10-28 13:52:56 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-10-28 13:52:56 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-10-28 13:52:56 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\wc_storage.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-10-28 13:52:55 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-10-28 13:52:54 ----A---- C:\WINDOWS\system32\combase.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2016-10-28 13:52:53 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-10-28 13:52:52 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-10-28 13:52:52 ----A---- C:\WINDOWS\SYSWOW64\dtdump.exe
2016-10-28 13:52:52 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-10-28 13:52:52 ----A---- C:\WINDOWS\system32\efsext.dll
2016-10-28 13:52:52 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-10-28 13:52:52 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\SYSWOW64\autoplay.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\system32\shdocvw.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\system32\msinfo32.exe
2016-10-28 13:52:50 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-10-28 13:52:50 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-28 13:52:49 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-28 13:52:48 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-10-28 13:52:48 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-28 13:52:48 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-10-28 13:52:48 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\winmde.dll
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\wininet.dll
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-10-28 13:52:47 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-28 13:52:46 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-10-28 13:52:46 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-10-28 13:52:46 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-10-28 13:52:46 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-10-28 13:52:45 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-10-28 13:52:44 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-10-28 13:52:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-10-28 13:52:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-10-28 13:52:43 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-10-28 13:52:42 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2016-10-28 13:52:41 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-10-28 13:52:40 ----A---- C:\WINDOWS\system32\cdd.dll
2016-10-28 13:52:39 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-10-28 13:52:39 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2016-10-28 13:52:38 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\system32\FSClient.dll
2016-10-28 13:52:38 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-10-28 13:52:38 ----A---- C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2016-10-28 13:52:37 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-10-23 22:41:38 ----D---- C:\ProgramData\Jagex
2016-10-23 22:41:05 ----D---- C:\Program Files\Jagex
2016-10-21 18:08:21 ----D---- C:\Users\Filip\AppData\Roaming\MPC-HC
2016-10-11 21:00:55 ----D---- C:\WINDOWS\PCHEALTH
2016-10-11 20:55:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-11 20:55:42 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2016-10-11 20:55:42 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2016-10-11 20:55:42 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-11 20:55:41 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\netshell.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\dsreg.dll
2016-10-11 20:55:40 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\wpx.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-10-11 20:55:38 ----A---- C:\WINDOWS\system32\bcdedit.exe
2016-10-11 20:55:37 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-10-11 20:55:35 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-10-11 20:55:35 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2016-10-11 20:55:33 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-10-11 20:55:33 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-10-11 20:55:33 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-10-11 20:55:33 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-10-11 20:55:32 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-10-11 20:55:32 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-10-11 20:55:32 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-11 20:55:32 ----A---- C:\WINDOWS\system32\smartscreen.exe
2016-10-11 20:55:32 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-10-11 20:55:32 ----A---- C:\WINDOWS\system32\drivers\MegaSas2i.sys
2016-10-11 20:55:32 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-10-11 20:55:31 ----A---- C:\WINDOWS\system32\adsmsext.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\system32\dialclient.dll
2016-10-11 20:55:30 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-10-11 20:55:29 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-11 20:55:29 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-11 20:55:26 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-11 20:55:23 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-10-11 20:55:23 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2016-10-11 20:55:21 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-10-11 20:55:21 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-10-11 20:55:21 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-11 20:55:19 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-11 20:55:18 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-10-11 20:55:18 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-11 20:55:18 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-10-11 20:55:18 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-10-11 20:55:18 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-10-11 20:55:17 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-11 20:55:17 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\system32\offreg.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\system32\msi.dll
2016-10-11 20:55:16 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2016-10-11 20:55:16 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-10-11 20:55:16 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-10-11 20:55:15 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-10-11 20:55:14 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-11 20:55:14 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-10-11 20:55:14 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-10-11 20:55:13 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-11 20:55:13 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-10-11 20:55:12 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-11 20:55:11 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-10-11 20:55:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-10-11 20:55:09 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-10-11 20:55:09 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2016-10-11 20:55:09 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-10-11 20:55:09 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2016-10-11 20:55:09 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-10-11 20:55:09 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-10-11 20:55:09 ----A---- C:\WINDOWS\system32\cloudAP.dll
2016-10-07 19:07:00 ----A---- C:\WINDOWS\system32\drivers\ekbdflt.sys
2016-09-30 10:38:34 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-30 10:38:32 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-30 10:38:32 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-30 10:38:31 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-09-30 10:38:31 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-30 10:38:31 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-09-30 10:38:31 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-30 10:38:31 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.CredDialogController.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-30 10:38:30 ----A---- C:\WINDOWS\system32\ci.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\wkssvc.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\webio.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-30 10:38:29 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2016-09-30 10:38:28 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\securekernel.exe
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\offlinesam.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-30 10:38:28 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-30 10:38:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\lsm.dll
2016-09-30 10:38:26 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-09-30 10:38:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-09-30 10:38:25 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2016-09-30 10:38:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2016-09-30 10:38:24 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-09-30 10:38:23 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-30 10:38:22 ----A---- C:\WINDOWS\system32\cdp.dll
2016-09-30 10:38:21 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-30 10:38:21 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-30 10:38:20 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-30 10:38:20 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-30 10:38:20 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2016-09-30 10:38:20 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-30 10:38:20 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\system32\gpsvc.dll
2016-09-30 10:38:19 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-09-30 10:38:18 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2016-09-30 10:38:18 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-09-30 10:38:18 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2016-09-30 10:38:18 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2016-09-30 10:38:18 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-30 10:38:18 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-09-30 10:38:18 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\ReAgent.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\pdh.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\discan.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\AppContracts.dll
2016-09-30 10:38:17 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\Sens.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\fveui.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-30 10:38:16 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-30 10:38:15 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-09-30 10:38:15 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\credprovhost.dll
2016-09-30 10:38:14 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-30 10:38:13 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-30 10:38:13 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-30 10:38:13 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-09-30 10:38:13 ----A---- C:\WINDOWS\system32\ffbroker.dll
2016-09-30 10:38:11 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-30 10:38:05 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-09-30 10:38:05 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-09-30 10:38:05 ----A---- C:\WINDOWS\system32\spaceman.exe
2016-09-30 10:38:04 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-30 10:38:04 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-30 10:38:04 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-30 10:38:04 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-30 10:38:03 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-30 10:38:03 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-30 10:38:03 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-09-30 10:38:03 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2016-09-30 10:38:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\RMapi.dll
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\rascustom.dll
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-09-30 10:38:01 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\mprapi.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2016-09-30 10:38:00 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-09-30 10:37:59 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\nltest.exe
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\devenum.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\DataExchange.dll
2016-09-30 10:37:59 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\DataExchange.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\RelPost.exe
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2016-09-30 10:37:58 ----A---- C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\bootux.dll
2016-09-30 10:37:57 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\imapi2.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-09-30 10:37:56 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2016-09-30 10:37:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-30 10:37:55 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-30 10:37:55 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-30 10:37:55 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-30 10:37:55 ----A---- C:\WINDOWS\system32\smphost.dll
2016-09-30 10:37:53 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-09-30 10:37:53 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-30 10:37:53 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-30 10:37:52 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-09-30 10:37:51 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-09-30 10:37:51 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-09-30 10:37:50 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-30 10:37:50 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\provops.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-09-30 10:37:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-30 10:37:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-30 10:37:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-09-30 10:37:49 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-09-30 10:37:49 ----A---- C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-30 10:37:49 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-30 10:37:49 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-09-30 10:37:49 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-09-30 10:37:49 ----A---- C:\WINDOWS\system32\biwinrt.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 10:37:48 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-09-30 10:37:47 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\system32\Windows.Energy.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2016-09-30 10:37:46 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2016-09-30 10:37:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-09-30 10:37:43 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-09-30 10:37:42 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-30 10:37:42 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-09-30 10:37:41 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2016-09-30 10:37:41 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2016-09-30 10:37:41 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-09-30 10:37:41 ----A---- C:\WINDOWS\system32\gdi32full.dll
2016-09-30 10:37:40 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-09-30 10:37:40 ----A---- C:\WINDOWS\system32\ws2_32.dll
2016-09-30 10:37:40 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-09-30 10:37:40 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-09-30 10:37:40 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-30 10:37:40 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\SYSWOW64\mprapi.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\skci.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\qedit.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\icsvcext.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\dwmapi.dll
2016-09-30 10:37:39 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-09-30 10:37:38 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\SYSWOW64\BackgroundMediaPolicy.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2016-09-30 10:37:38 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\SYSWOW64\ClipboardServer.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\system32\sbe.dll
2016-09-30 10:37:37 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\smphost.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\system32\rshx32.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-09-30 10:37:36 ----A---- C:\WINDOWS\system32\odbcconf.dll

======List of files/folders modified in the last 1 month======

2016-10-29 16:31:56 ----RD---- C:\Program Files
2016-10-29 16:31:19 ----D---- C:\WINDOWS\Temp
2016-10-29 16:19:01 ----D---- C:\WINDOWS\system32\SleepStudy
2016-10-29 15:55:00 ----D---- C:\WINDOWS\system32\sru
2016-10-29 12:04:04 ----D---- C:\WINDOWS\Prefetch
2016-10-29 11:57:34 ----D---- C:\WINDOWS\System32
2016-10-29 11:57:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-29 11:56:46 ----D---- C:\WINDOWS\system32\config
2016-10-29 11:54:48 ----D---- C:\WINDOWS\INF
2016-10-29 11:52:25 ----D---- C:\Program Files (x86)\Glary Utilities 5
2016-10-29 11:51:51 ----RD---- C:\WINDOWS\Microsoft.NET
2016-10-29 11:51:51 ----D---- C:\WINDOWS\WinSxS
2016-10-29 11:51:37 ----D---- C:\WINDOWS\system32\DriverStore
2016-10-29 11:51:31 ----D---- C:\WINDOWS\system32\drivers
2016-10-29 03:51:13 ----D---- C:\WINDOWS\system32\catroot2
2016-10-29 03:51:02 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-10-29 03:51:02 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-10-29 03:51:02 ----AD---- C:\WINDOWS\SysWOW64
2016-10-29 03:51:01 ----RSD---- C:\WINDOWS\Fonts
2016-10-29 03:51:01 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\wbem
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\oobe
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\en-US
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\cs-CZ
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\Boot
2016-10-29 03:51:01 ----D---- C:\WINDOWS\system32\appraiser
2016-10-29 03:51:01 ----D---- C:\WINDOWS\AppPatch
2016-10-29 03:51:01 ----D---- C:\Windows
2016-10-29 03:51:01 ----D---- C:\Program Files\Windows Media Player
2016-10-29 03:51:01 ----D---- C:\Program Files (x86)\Windows Media Player
2016-10-29 00:47:10 ----D---- C:\Users\Filip\AppData\Roaming\vlc
2016-10-28 16:17:57 ----D---- C:\WINDOWS\CbsTemp
2016-10-28 16:16:36 ----SHD---- C:\System Volume Information
2016-10-28 14:46:09 ----D---- C:\Users\Filip\AppData\Roaming\.tribot
2016-10-28 13:46:37 ----HD---- C:\Program Files\WindowsApps
2016-10-28 13:46:37 ----D---- C:\WINDOWS\AppReadiness
2016-10-25 01:30:58 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-10-24 12:02:21 ----SHD---- C:\WINDOWS\Installer
2016-10-23 23:11:35 ----D---- C:\WINDOWS\SoftwareDistribution
2016-10-23 22:41:38 ----HD---- C:\ProgramData
2016-10-23 22:41:05 ----D---- C:\ProgramData\Package Cache
2016-10-23 20:57:22 ----D---- C:\WINDOWS\Logs
2016-10-21 19:36:06 ----AD---- C:\Program Files (x86)\Overwolf
2016-10-21 17:26:44 ----D---- C:\WINDOWS\system32\NDF
2016-10-21 16:16:42 ----D---- C:\WINDOWS\system32\Tasks
2016-10-15 12:25:59 ----D---- C:\Program Files (x86)\KeyDominator1
2016-10-13 23:39:10 ----D---- C:\WINDOWS\rescache
2016-10-13 10:52:28 ----RD---- C:\WINDOWS\assembly
2016-10-11 21:20:36 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-10-11 21:20:36 ----D---- C:\WINDOWS\system32\migwiz
2016-10-11 21:20:35 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-10-11 21:20:35 ----D---- C:\WINDOWS\ShellExperiences
2016-10-11 21:20:35 ----D---- C:\Program Files\Windows Photo Viewer
2016-10-11 21:20:35 ----D---- C:\Program Files\Windows Mail
2016-10-11 21:20:35 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-10-11 21:00:56 ----D---- C:\ProgramData\Microsoft Help
2016-10-11 21:00:37 ----D---- C:\WINDOWS\system32\MRT
2016-10-11 20:58:54 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-10-11 20:46:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2016-10-11 20:46:13 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2016-10-11 20:42:54 ----D---- C:\WINDOWS\system32\WDI
2016-10-08 12:17:37 ----AD---- C:\Program Files (x86)\TeamViewer
2016-10-07 19:07:01 ----D---- C:\WINDOWS\system32\CatRoot
2016-09-30 23:13:12 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-09-30 23:13:12 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-09-30 23:13:12 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2016-09-30 23:13:12 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-09-30 23:13:12 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-09-30 23:13:10 ----SD---- C:\WINDOWS\system32\F12
2016-09-30 23:13:10 ----D---- C:\WINDOWS\system32\Sysprep
2016-09-30 23:13:10 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-09-30 23:13:10 ----D---- C:\WINDOWS\system32\setup
2016-09-30 23:13:10 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-09-30 23:13:10 ----D---- C:\WINDOWS\system32\Dism
2016-09-30 23:13:09 ----D---- C:\WINDOWS\Provisioning
2016-09-30 23:13:09 ----D---- C:\WINDOWS\bcastdvr
2016-09-30 23:13:09 ----D---- C:\Program Files\Internet Explorer
2016-09-30 23:13:09 ----D---- C:\Program Files (x86)\Internet Explorer

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2016-10-07 199328]
R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2016-10-07 84640]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-07-16 45920]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2016-10-07 263296]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2016-10-07 197288]
R1 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2016-10-07 208552]
R1 EpfwLWF;@oem7.inf,%EpfwLWF_Desc%;ESET Personal Firewall; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2016-10-07 61608]
R1 GUBootStartup;GUBootStartup; \??\C:\WINDOWS\System32\drivers\GUBootStartup.sys [2016-03-22 20160]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 ekbdflt;ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [2016-10-07 153248]
R2 LGCoreTemp;Logitech CPU Core Tempurature; \??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [2015-06-21 14184]
R3 LGBusEnum;@oem17.inf,%LGBusEnum.SVCDESC%;Logitech Gaming Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\LGBusEnum.sys [2015-06-11 37408]
R3 LGJoyXlCore;@oem17.inf,%LGJoyXlCore.SVCDESC%;Logitech Translation Layer Driver (LGS); C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [2015-06-11 68384]
R3 LGVirHid;@oem10.inf,%LGVirHid.SVCDESC%;Logitech Gamepanel Virtual HID Device Driver; C:\WINDOWS\system32\drivers\LGVirHid.sys [2015-06-11 26912]
R3 NVHDA;@oem13.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2016-09-20 223304]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_674733509ab83d72\nvlddmkm.sys [2016-09-20 14242872]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-06-15 28216]
R3 nvvad_WaveExtensible;@oem32.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-04-14 56384]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-07-16 589824]
S0 eelam;eelam; C:\WINDOWS\system32\DRIVERS\eelam.sys [2016-10-07 15488]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-09-25 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 KovaPlusFltr;ROCCAT Kova[+] Mouse; C:\WINDOWS\system32\drivers\KovaPlusFltr.sys [2010-01-25 15104]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 taphss6;Anchorfree HSS VPN Adapter; C:\WINDOWS\System32\drivers\taphss6.sys [2016-07-21 42064]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [2016-03-23 1231376]
R2 CDPUserSvc_141cfb;CDPUserSvc_141cfb; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-10-07 2780160]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-06-15 1165368]
R2 LogiRegistryService;Logitech Gaming Registry Service; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [2016-02-02 193144]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-06-15 1881144]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-06-15 2522680]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-09-17 1364024]
R2 OneSyncSvc_141cfb;Hostitel synchronizace_141cfb; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2015-09-03 614664]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-09-20 7500048]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-06-15 3634232]
R3 PimIndexMaintenanceSvc_141cfb;Data kontaktů_141cfb; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-10-13 1459488]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=%SystemRoot%\System32\CDPUserSvc.dll
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2016-04-09 1591264]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll"=%SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\hvhostsvc.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\irmon.dll
S3 MessagingService_141cfb;Služba zasílání zpráv_141cfb; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-09-25 167880]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\syswow64\GameMon.des [2016-05-18 5691912]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 OverwolfUpdater;Overwolf Updater Windows SCM; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-09-27 1310960]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\RMapi.dll
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll"=%systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------



Děkuji za pomoc.

Zdravím!
Zkusil jste restartovat modem, router, příp. další síťový prvek v datové cestě? Pokud ne, nejdříve to zkuste. Podobné mikrovýpadky obvykle PC nezpůsobuje.

ano zkoušel, nevím to může být. restartoval jsem modem jak jsem psal výše, nepomohlo

Zkusíme odezvu. Spusťte přík. řádek a napište do něj:

ping www.seznam.cz -t

a odentrujte.
Odezva by neměla překročit 50ms a měla by bý pravidelná.

nic se nestalo - http://prnt.sc/d0ivu2

Njn, desítka. Přesně je to takto: https://translate.google.cz/translate?h ... rev=search .

tedy podle toho co se tam píše by to měl být příkaz ping www.seznam.cz, to ale nefunguje, tak nevím :/

To je divné. Zkuste tedy změřit rychlost na www.dsl.cz . Součástí toho měření je i odezva. Měření proveďte alespoň 3x za sebou.

první měření http://prnt.sc/d0krek
druhé měření http://prnt.sc/d0krou
třetí měření http://prnt.sc/d0kry7

Tohle je OK. Průkaznější by byl ovšem ping z přík. řádku nějaký čas trvale spuštěný. No nic, podíváme se na ten log. Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v6.030 - Log soubor vytvořen 29/10/2016 na 22:36:46
# Aktualizováno dne 19/10/2016 z Malwarebytes
# Databáze : 2016-10-28.2 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Filip - SKYLAKE-PC
# Beží od : C:\Users\Filip\Desktop\adwcleaner_6.030.exe
# Mod: Čištění
# Podpora : hxxps://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Adresáře ] *****

[-] Adresář smazán:C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi


***** [ Soubory ] *****

[-] Soubor smazán:C:\END
[-] Soubor smazán:C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\8w3m1rpp.default\invalidprefs.js


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****

[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Klíč smazán:HKU\S-1-5-21-1962232660-4138352890-1282882815-1001\Software\wondershare
[#] Klíč smazán po restartování:HKCU\Software\wondershare
[-] Klíč smazán:HKLM\SOFTWARE\wondershare
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
[#] Klíč smazán po restartování:[x64] HKCU\Software\wondershare
[-] Klíč smazán:[x64] HKLM\SOFTWARE\wondershare


***** [ Prohlížeče ] *****

[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystartsearch___
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystartsearch_
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:feed.sonic-search.com
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystartsearch
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystartsearch.com
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystartsearch__
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:dragon-age-inquisition.en.softonic.com
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:quicktime.en.softonic.com
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Smazání:hxxp://www.mystartsearch.com/?type=hp&ts=14452 ... 8517585175
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazání:lkadffjmnaiokkdncgdlecdegajoiemi
[-] [C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default] [homepage] Smazání:hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2FeM1NCLNCW8Iom8DuhzdaCi8_JT2h1-Ill7gcytlAxPT6aVPDnx7cb6clAQPLiIeSz3GvoWQcnuqIwv8a51l2cCLJWRG4206rj2R_PGTdzYLcWOQaRVI6hd1boDvjs_7V4W_vKRqPSzQ,,


*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3275 Bajtů] - [29/10/2016 22:36:46]
C:\AdwCleaner\AdwCleaner[S0].txt - [3499 Bajtů] - [29/10/2016 22:36:24]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [3423 Bajtů] ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

i přesto že mi vše co mám píše, že se jedná o malware, stáhnul jsem to jelikož Vám věřím, ale po uložení na plochu mi to stále píše, že to není uloženo na plochu, stáhnul jsem to proto znovu a stejný problém, nevím co s tím. Navíc se mi na ploše vytvořil soubor lm.bat

Malware to není, běžně to tady používám, pouze se to nelíbí některým antivirům z důvodu, že tím lze zasahovat do systému.