VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by LukasNMNM at 2017-09-05 21:32:22
Microsoft Windows 10 Home
System drive C: has 85 GB (37%) free of 228 GB
Total RAM: 8183 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:32:43, on 05.09.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\LukasNMNM\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
C:\Program Files (x86)\PDF24\pdf24.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
C:\totalcmd\TOTALCMD.EXE
C:\WINDOWS\SysWOW64\DllHost.exe
C:\Program Files\trend micro\LukasNMNM.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [PDFPrint] "C:\Program Files (x86)\PDF24\pdf24.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\LukasNMNM\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [AceStream] C:\Users\LukasNMNM\AppData\Roaming\ACEStream\engine\ace_engine.exe
O4 - HKCU\..\Run: [GalaxyClient] C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe /launchViaAutoStart
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIKCE.EXE /EPT "EPLTarget\P0000000000000000" /M "WF-7110 Series"
O4 - HKCU\..\Run: [World of Warships] "C:\Games\World_of_Warships\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: CodeMeter Control Center.lnk = C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Amazon Assistant Service - Unknown owner - C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe
O23 - Service: aswbIDSAgent - AVAST Software s.r.o. - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyClientService - GOG.com - C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem15.inf,%llmdisp%;Sentinel LDK License Manager (hasplms) - Unknown owner - C:\WINDOWS\system32\hasplms.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: PDF24 - Geek Software GmbH - C:\Program Files (x86)\PDF24\pdf24.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @oem8.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\WINDOWS\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11876 bytes

======Listing Processes======









winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k localservice -s nsi
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9ac5812f-a94b-4832-8cb0-46abe816e0c6 -SystemEventPortName:HostProcess-5ee34f96-d9e2-4a56-8234-c5f6ae83e1c4 -IoCancelEventPortName:HostProcess-ecebd1ab-8edd-4f4b-b3f6-933899ec1d76 -NonStateChangingEventPortName:HostProcess-7e981fe9-e5bb-47b5-9b27-668da5450b15 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0e27588f-f178-406e-b9e1-4fc9ecd33604 -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
c:\windows\system32\svchost.exe -k netsvcs -s SENS
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s netprofm
c:\windows\system32\svchost.exe -k localservice -s FontCache
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection

c:\windows\system32\svchost.exe -k localservicenonetwork -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s FDResPub
C:\WINDOWS\system32\svchost.exe -k LocalService
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s HomeGroupProvider
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
dashost.exe {60a6245a-73db-48f8-b6b6c9daae7628ad}
"C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"c:\program files (x86)\blizzard\bonjour service\mdnsresponder.exe"
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
C:\WINDOWS\system32\hasplms.exe -run
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files (x86)\PDF24\pdf24.exe" -service
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"

C:\WINDOWS\System32\svchost.exe -k utcsvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
c:\windows\system32\viakaraokesrv.exe
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s Netman

C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -s LicenseManager
"C:\Program Files\Windows Defender\MSASCuiL.exe"
AvastUI.exe /nogui
"C:\Users\LukasNMNM\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Windows\System32\spool\drivers\x64\3\E_YATIKCE.EXE" /EPT "EPLTarget\P0000000000000000" /M "WF-7110 Series"
c:\windows\system32\svchost.exe -k netsvcs
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe"
"C:\Program Files (x86)\PDF24\pdf24.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --ran-launcher --opener-id="KocZKfOPJ+80uHrgC:\Windows\explorer.exe"
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera_crashreporter.exe" --ran-launcher --opener-id="KocZKfOPJ+80uHrgC:\Windows\explorer.exe" --crash-reporter-parent-id=9892
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --type=gpu-process --field-trial-handle=1568,10331309509903385947,12216438027227317314,131072 --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,20,21,24,43,77 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x1401 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8541 --gpu-driver-date=8-21-2017 --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --service-request-channel-token=07C01AED04CF0E97BDA68A38F8160E53 --mojo-platform-channel-handle=1592 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --type=renderer --field-trial-handle=1568,10331309509903385947,12216438027227317314,131072 --service-pipe-token=550B640D002734DCBC58B3A6F3F59AF1 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=550B640D002734DCBC58B3A6F3F59AF1 --renderer-client-id=3 --mojo-platform-channel-handle=2776 /prefetch:1
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --type=renderer --field-trial-handle=1568,10331309509903385947,12216438027227317314,131072 --service-pipe-token=CEEB70DEFC24FCF789BC0FA013570CCE --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=CEEB70DEFC24FCF789BC0FA013570CCE --renderer-client-id=5 --mojo-platform-channel-handle=2932 /prefetch:1
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --type=renderer --field-trial-handle=1568,10331309509903385947,12216438027227317314,131072 --service-pipe-token=AD101365B71BBE0F0162998D54D10AA8 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=AD101365B71BBE0F0162998D54D10AA8 --renderer-client-id=9 --mojo-platform-channel-handle=4860 /prefetch:1
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s WdiSystemHost
"C:\Program Files (x86)\Opera\47.0.2631.71_0\opera.exe" --type=renderer --field-trial-handle=1568,10331309509903385947,12216438027227317314,131072 --service-pipe-token=F637F8B3286FAB0E90C345B3BD6DCAD6 --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --with-feature:installer-experiment-test=off --with-feature:installer-download-sfx-package=off --with-feature:installer-use-minimal-package=off --with-feature:installer-pref-default-overrides-support=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-support-x64-download=on --crash-reporter-pid=9492 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=F637F8B3286FAB0E90C345B3BD6DCAD6 --renderer-client-id=14 --mojo-platform-channel-handle=6172 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x4d8
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
"C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe" -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\totalcmd\TOTALCMD.EXE"
C:\WINDOWS\SysWOW64\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09}
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -s gpsvc
"C:\Users\LUKASN~1\AppData\Local\Temp\scoped_dir9892_2471\RSITx64.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -s wlidsvc
"C:\Users\LukasNMNM\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\EPSON WF-7110 Series Invitation {E77BE3B8-9A6E-4593-915D-2AB93A32AE1D}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKCE.EXE /EXE:"{E77BE3B8-9A6E-4593-915D-2AB93A32AE1D}" /F:"Invitation"
C:\WINDOWS\tasks\EPSON WF-7110 Series Invitation {F240E41C-F7C8-49CD-8E1D-8A00DB1F701A}.job - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKCE.EXE /EXE:"{F240E41C-F7C8-49CD-8E1D-8A00DB1F701A}" /F:"Invitation"
C:\WINDOWS\tasks\EPSON WF-7110 Series Update {E77BE3B8-9A6E-4593-915D-2AB93A32AE1D}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKCE.EXE /EXE:"{E77BE3B8-9A6E-4593-915D-2AB93A32AE1D}" /F:"Update"
C:\WINDOWS\tasks\EPSON WF-7110 Series Update {F240E41C-F7C8-49CD-8E1D-8A00DB1F701A}.job - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKCE.EXE /EXE:"{F240E41C-F7C8-49CD-8E1D-8A00DB1F701A}" /F:"Update"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}]
Amazon Assistant - C:\Windows\system32\mscoree.dll [2017-03-18 374784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-03 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-03 187968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-09-03 239856]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2017-08-22 1923192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\LukasNMNM\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-07-27 1536208]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2017-08-28 3071776]
"AceStream"=C:\Users\LukasNMNM\AppData\Roaming\ACEStream\engine\ace_engine.exe [2017-08-30 27992]
"GalaxyClient"=C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [2017-08-08 5087296]
"EPLTarget\P0000000000000000"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIKCE.EXE [2013-09-12 298560]
"World of Warships"=C:\Games\World_of_Warships\WargamingGameUpdater.exe [2017-08-07 3136264]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"PDFPrint"=C:\Program Files (x86)\PDF24\pdf24.exe [2016-12-20 217736]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2017-05-23 4174464]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-07-21 587288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
CodeMeter Control Center.lnk - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2017-09-05 21:29:07 ----D---- C:\Program Files\trend micro
2017-09-05 21:29:06 ----D---- C:\rsit
2017-09-05 21:14:01 ----D---- C:\ProgramData\SWCUTemp
2017-09-05 21:05:15 ----HD---- C:\OneDriveTemp
2017-09-05 20:54:32 ----SHD---- C:\Config.Msi
2017-09-05 20:15:03 ----HD---- C:\ProgramData\Common Files
2017-09-05 20:15:03 ----D---- C:\ProgramData\Avg
2017-09-05 16:01:54 ----D---- C:\WINDOWS\Panther
2017-09-05 10:13:53 ----D---- C:\Users\LukasNMNM\AppData\Roaming\NVIDIA
2017-09-04 22:07:03 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-04 21:53:12 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2017-09-04 21:53:12 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2017-09-04 21:53:12 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2017-09-04 21:53:12 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2017-09-04 21:53:12 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-09-04 21:52:58 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2017-09-04 21:52:58 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2017-09-04 21:52:55 ----A---- C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-09-04 21:52:28 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2017-09-04 21:52:17 ----D---- C:\Program Files (x86)\VulkanRT
2017-09-04 21:52:17 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2017-09-04 21:52:17 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2017-09-04 21:52:17 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2017-09-04 21:52:17 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2017-09-04 21:51:58 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2017-09-04 21:51:58 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2017-09-04 21:51:58 ----A---- C:\WINDOWS\system32\nvshext.dll
2017-09-04 21:51:58 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2017-09-04 21:51:58 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2017-09-04 21:51:57 ----A---- C:\WINDOWS\system32\nvmctray.dll
2017-09-04 21:51:57 ----A---- C:\WINDOWS\system32\nvcpl.dll
2017-09-04 21:51:39 ----A---- C:\WINDOWS\NvContainerRecovery.bat
2017-09-04 21:51:34 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2017-09-04 21:51:34 ----A---- C:\WINDOWS\system32\OpenCL.dll
2017-09-04 21:48:43 ----A---- C:\WINDOWS\system32\drivers\nvvhci.sys
2017-09-04 21:48:41 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2017-09-04 21:48:41 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-09-04 21:48:41 ----A---- C:\WINDOWS\system32\nvhdap64.dll
2017-09-04 21:48:41 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFThevc.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvopencl.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvEncMFThevc.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvdispgenco6438541.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvdispco6438541.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvcuda.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2017-09-04 21:48:40 ----A---- C:\WINDOWS\system32\nvapi64.dll
2017-09-04 21:37:46 ----D---- C:\temp
2017-09-03 13:48:34 ----A---- C:\WINDOWS\system32\aswBoot.exe
2017-09-03 13:10:55 ----D---- C:\ProgramData\Ashampoo
2017-08-28 18:45:33 ----D---- C:\pracovní prostor
2017-08-21 15:03:11 ----A---- C:\WINDOWS\system32\sdnclean64.exe
2017-08-21 14:59:11 ----A---- C:\WINDOWS\wininit.ini
2017-08-15 10:57:09 ----D---- C:\WINDOWS\LastGood
2017-08-14 09:10:51 ----D---- C:\ProgramData\Spybot - Search & Destroy
2017-08-14 09:10:42 ----AD---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-08-13 10:49:41 ----D---- C:\WINDOWS\LastGood.Tmp
2017-08-10 15:11:01 ----D---- C:\Program Files\Blizzard Entertainment
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\shlwapi.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\msjtes40.dll
2017-08-09 10:15:39 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msxbde40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\mswdat10.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\mstext40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msrepl40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\mspbde40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msltus40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msjter40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msjetoledb40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-08-09 10:15:38 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll
2017-08-09 10:15:37 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-08-09 10:15:37 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-08-09 10:15:37 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-08-09 10:15:37 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2017-08-09 10:15:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-09 10:15:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2017-08-09 10:15:35 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-08-09 10:15:35 ----A---- C:\WINDOWS\SYSWOW64\cmintegrator.dll
2017-08-09 10:15:35 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2017-08-09 10:15:34 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-08-09 10:15:32 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-08-09 10:15:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-08-09 10:15:32 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\tokenbinding.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\shsvcs.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-08-09 10:15:31 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-08-09 10:15:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-08-09 10:15:29 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-08-09 10:15:29 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2017-08-09 10:15:27 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2017-08-09 10:15:26 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-08-09 10:15:26 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-08-09 10:15:26 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2017-08-09 10:15:26 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-08-09 10:15:26 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-08-09 10:15:25 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-08-09 10:15:25 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-08-09 10:15:25 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-08-09 10:15:25 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-08-09 10:15:25 ----A---- C:\WINDOWS\SYSWOW64\IpNatHlpClient.dll
2017-08-09 10:15:24 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-08-09 10:15:24 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-08-09 10:15:24 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-08-09 10:15:24 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-08-09 10:15:23 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-08-09 10:15:22 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-08-09 10:15:21 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\msacm32.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-08-09 10:15:19 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-08-09 10:15:18 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-08-09 10:15:18 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2017-08-09 10:13:38 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-09 10:13:38 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-09 10:13:38 ----A---- C:\WINDOWS\system32\tquery.dll
2017-08-09 10:13:38 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2017-08-09 10:13:36 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-08-09 10:13:36 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-08-09 10:13:27 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-09 10:13:25 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-08-09 10:13:25 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-08-09 10:13:25 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-08-09 10:13:25 ----A---- C:\WINDOWS\system32\lpasvc.dll
2017-08-09 10:13:25 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\wininit.exe
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-08-09 10:13:24 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-09 10:13:23 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-08-09 10:13:22 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\twinui.dll
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-08-09 10:13:17 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\sscore.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\srvsvc.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\spbcd.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\shsvcs.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\shlwapi.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\scksp.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-08-09 10:13:16 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\tokenbinding.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\shell32.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-08-09 10:13:15 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-08-09 10:13:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-09 10:13:14 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-08-09 10:13:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-09 10:13:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-09 10:13:12 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-08-09 10:13:11 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-09 10:13:11 ----A---- C:\WINDOWS\system32\services.exe
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\rastlsext.dll
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\psmsrv.dll
2017-08-09 10:13:07 ----A---- C:\WINDOWS\system32\profsvcext.dll
2017-08-09 10:13:06 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-09 10:13:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-08-09 10:13:03 ----A---- C:\WINDOWS\system32\rastls.dll
2017-08-09 10:13:03 ----A---- C:\WINDOWS\system32\officecsp.dll
2017-08-09 10:13:03 ----A---- C:\WINDOWS\system32\ofdeploy.exe
2017-08-09 10:13:02 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-09 10:13:01 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-08-09 10:13:00 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-09 10:13:00 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-08-09 10:13:00 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2017-08-09 10:13:00 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2017-08-09 10:12:58 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-08-09 10:12:58 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-09 10:12:58 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2017-08-09 10:12:58 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-09 10:12:58 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-08-09 10:12:56 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-08-09 10:12:56 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-08-09 10:12:56 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-09 10:12:56 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-09 10:12:56 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-08-09 10:12:55 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-08-09 10:12:55 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-08-09 10:12:55 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\msIso.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\InputService.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-08-09 10:12:54 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-08-09 10:12:53 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-08-09 10:12:53 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-08-09 10:12:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-08-09 10:12:50 ----A---- C:\WINDOWS\system32\hal.dll
2017-08-09 10:12:50 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-08-09 10:12:49 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-08-09 10:12:49 ----A---- C:\WINDOWS\system32\untfs.dll
2017-08-09 10:12:49 ----A---- C:\WINDOWS\system32\fdeploy.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\werui.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\wer.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\efscore.dll
2017-08-09 10:12:48 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\qasf.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\dwmredir.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\dui70.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-09 10:12:47 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\coredpus.dll
2017-08-09 10:12:46 ----A---- C:\WINDOWS\system32\configmanager2.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\dmcsps.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-08-09 10:12:45 ----A---- C:\WINDOWS\system32\autoconv.exe
2017-08-09 10:12:44 ----A---- C:\WINDOWS\system32\ole32.dll
2017-08-09 10:12:39 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-08-09 10:12:39 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2017-08-09 10:12:39 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-08-09 10:12:39 ----A---- C:\WINDOWS\system32\bcdboot.exe
2017-08-09 10:12:38 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2017-08-09 10:12:36 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-08-09 10:12:35 ----A---- C:\WINDOWS\system32\bcd.dll
2017-08-09 10:12:35 ----A---- C:\WINDOWS\system32\autochk.exe
2017-08-09 10:12:35 ----A---- C:\WINDOWS\system32\autofmt.exe
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\msacm32.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-09 10:12:34 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-08-09 10:12:33 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-09 10:12:29 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2017-08-09 10:12:28 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2017-08-09 10:12:27 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-08-09 10:12:19 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-08-09 10:12:19 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2017-08-09 10:12:19 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2017-08-09 10:12:12 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2017-08-08 19:41:34 ----D---- C:\Users\LukasNMNM\AppData\Roaming\Nexus - The Jupiter Incident
2017-08-07 09:37:06 ----D---- C:\Program Files (x86)\TomTom International B.V
2017-08-07 09:36:53 ----AD---- C:\Program Files (x86)\MyDrive Connect

======List of files/folders modified in the last 1 month======

2017-09-05 21:29:16 ----D---- C:\WINDOWS\Temp
2017-09-05 21:29:07 ----RD---- C:\Program Files
2017-09-05 21:26:11 ----D---- C:\Users\LukasNMNM\AppData\Roaming\Skype
2017-09-05 21:26:01 ----D---- C:\WINDOWS\system32\FxsTmp
2017-09-05 21:24:24 ----RD---- C:\Program Files (x86)
2017-09-05 21:24:00 ----D---- C:\Windows
2017-09-05 21:14:01 ----HD---- C:\ProgramData
2017-09-05 21:10:14 ----D---- C:\WINDOWS\System32
2017-09-05 21:10:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-05 21:09:38 ----D---- C:\WINDOWS\AppReadiness
2017-09-05 21:09:37 ----HD---- C:\Program Files\WindowsApps
2017-09-05 21:06:18 ----D---- C:\ProgramData\NVIDIA
2017-09-05 21:06:13 ----D---- C:\WINDOWS\system32\sru
2017-09-05 21:05:17 ----D---- C:\Users\LukasNMNM\AppData\Roaming\.ACEStream
2017-09-05 21:02:14 ----D---- C:\Users\LukasNMNM\AppData\Roaming\vlc
2017-09-05 20:56:42 ----SHD---- C:\WINDOWS\Installer
2017-09-05 20:56:42 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-09-05 20:56:35 ----D---- C:\Users\LukasNMNM\AppData\Roaming\Seznam.cz
2017-09-05 20:55:16 ----D---- C:\ProgramData\NVIDIA Corporation
2017-09-05 20:54:46 ----D---- C:\WINDOWS\system32\Tasks
2017-09-05 20:34:17 ----SHD---- C:\System Volume Information
2017-09-05 20:34:17 ----D---- C:\WINDOWS\system32\Sysprep
2017-09-05 20:34:17 ----D---- C:\WINDOWS\INF
2017-09-05 20:28:19 ----D---- C:\WINDOWS\system32\drivers\etc
2017-09-05 20:16:25 ----D---- C:\WINDOWS\WinSxS
2017-09-05 20:01:33 ----SD---- C:\ProgramData\Microsoft
2017-09-05 18:50:04 ----D---- C:\WINDOWS\system32\SleepStudy
2017-09-05 18:00:01 ----D---- C:\WINDOWS\system32\LogFiles
2017-09-05 17:57:33 ----RD---- C:\WINDOWS\Microsoft.NET
2017-09-05 15:41:35 ----D---- C:\ProgramData\Skype
2017-09-05 15:41:26 ----RD---- C:\Program Files (x86)\Skype
2017-09-05 15:41:26 ----D---- C:\Program Files (x86)\Common Files
2017-09-05 15:28:03 ----D---- C:\Program Files\GRAPHISOFT
2017-09-05 15:00:15 ----D---- C:\WINDOWS\Logs
2017-09-05 14:59:02 ----D---- C:\WINDOWS\system32\config
2017-09-05 08:16:20 ----D---- C:\WINDOWS\system32\drivers
2017-09-04 21:53:48 ----D---- C:\WINDOWS\system32\catroot2
2017-09-04 21:53:48 ----D---- C:\WINDOWS\system32\CatRoot
2017-09-04 21:53:12 ----D---- C:\WINDOWS\SysWOW64
2017-09-04 21:53:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-09-04 21:53:07 ----D---- C:\WINDOWS\system32\DriverStore
2017-09-04 21:53:05 ----D---- C:\Program Files\NVIDIA Corporation
2017-09-04 21:51:57 ----D---- C:\WINDOWS\Help
2017-09-04 21:26:23 ----D---- C:\Users\LukasNMNM\AppData\Roaming\Graphisoft
2017-09-04 21:25:59 ----RSD---- C:\WINDOWS\assembly
2017-09-04 21:25:58 ----RSD---- C:\WINDOWS\Fonts
2017-09-04 21:25:58 ----D---- C:\Program Files\Common Files
2017-09-04 21:25:37 ----D---- C:\ProgramData\Autodesk
2017-09-04 21:23:46 ----D---- C:\Users\LukasNMNM\AppData\Roaming\Install.GS
2017-09-04 20:30:24 ----D---- C:\Program Files (x86)\Steam
2017-09-03 14:37:37 ----AD---- C:\Program Files (x86)\Opera
2017-09-03 14:33:02 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2017-09-03 14:32:41 ----D---- C:\Program Files (x86)\Java
2017-09-03 14:21:42 ----D---- C:\Program Files\Common Files\AV
2017-09-03 13:47:20 ----D---- C:\WINDOWS\Prefetch
2017-09-03 13:13:18 ----D---- C:\WINDOWS\Minidump
2017-09-03 13:13:18 ----D---- C:\WINDOWS\debug
2017-09-01 14:20:26 ----AD---- C:\Program Files (x86)\Battle.net
2017-09-01 13:12:46 ----AD---- C:\Program Files (x86)\StarCraft II
2017-08-31 17:14:27 ----D---- C:\Program Files (x86)\Google
2017-08-29 07:56:47 ----HD---- C:\_acestream_cache_
2017-08-28 18:34:14 ----D---- C:\Users\LukasNMNM\AppData\Roaming\MAXON
2017-08-28 18:19:21 ----AD---- C:\Program Files (x86)\CodeMeter
2017-08-22 03:01:55 ----A---- C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-08-13 16:02:34 ----D---- C:\WINDOWS\rescache
2017-08-13 01:17:57 ----D---- C:\WINDOWS\LiveKernelReports
2017-08-11 01:47:38 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2017-08-11 01:47:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-08-11 01:47:38 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-08-11 01:47:38 ----D---- C:\WINDOWS\system32\WinMetadata
2017-08-11 01:47:38 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-08-11 01:47:38 ----D---- C:\WINDOWS\system32\oobe
2017-08-11 01:47:38 ----D---- C:\WINDOWS\system32\en-US
2017-08-11 01:47:38 ----D---- C:\WINDOWS\system32\cs-CZ
2017-08-11 01:47:37 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-08-11 01:47:37 ----D---- C:\WINDOWS\ShellExperiences
2017-08-11 01:47:37 ----D---- C:\WINDOWS\AppPatch
2017-08-11 01:47:37 ----D---- C:\Program Files\Windows Photo Viewer
2017-08-11 01:47:37 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-08-11 01:47:31 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-08-10 13:33:58 ----D---- C:\WINDOWS\CbsTemp
2017-08-10 10:48:21 ----D---- C:\WINDOWS\system32\MRT
2017-08-10 10:42:53 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-08-08 18:09:41 ----D---- C:\WINDOWS\system32\Macromed
2017-08-08 18:09:36 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2017-08-08 09:06:45 ----AD---- C:\Program Files (x86)\GOG Galaxy
2017-08-08 08:30:22 ----N---- C:\WINDOWS\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2017-09-03 198976]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2017-09-03 343296]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2017-09-03 57736]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-09-03 84416]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-09-03 361336]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2017-09-03 320528]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-03 41832]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2017-09-03 110376]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-09-03 1016384]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-09-03 590880]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192]
R2 aksdf;aksdf; \??\C:\WINDOWS\system32\drivers\aksdf.sys [2015-09-24 109200]
R2 aksfridge;@oem15.inf,%AksFridgeServiceDisp%;Sentinel Fridge; C:\WINDOWS\system32\DRIVERS\aksfridge.sys [2015-09-24 205528]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-09-03 147784]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2017-09-03 199312]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336]
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys [2015-09-24 350552]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-03-18 79872]
R3 akshasp;@oem17.inf,%svcdesc%;SafeNet Inc. HASP Key; C:\WINDOWS\system32\DRIVERS\akshasp.sys [2015-09-24 77912]
R3 akshhl;@oem15.inf,%svcdesc%;SafeNet Inc. Sentinel HL Key; C:\WINDOWS\system32\DRIVERS\akshhl.sys [2015-09-24 81368]
R3 aksusb;@oem4.inf,%svcdesc%;SafeNet Inc. USB Key; C:\WINDOWS\system32\DRIVERS\aksusb.sys [2015-09-24 322560]
R3 NVHDA;@oem5.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2017-08-22 218712]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ce1961376673184c\nvlddmkm.sys [2017-08-22 15600248]
R3 nvvad_WaveExtensible;@oem27.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2017-08-22 48248]
R3 nvvhci;@oem30.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2017-08-22 57976]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-03-18 604160]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2017-03-18 36760]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-09-03 47016]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-03-18 39424]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-08-22 30328]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 Amazon Assistant Service;Amazon Assistant Service; C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe [2017-06-14 104624]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-09-03 275208]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe [2017-03-30 390504]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CDPUserSvc_2ecfe;CDPUserSvc_2ecfe; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CodeMeter.exe;CodeMeter Runtime Server; C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2015-08-17 3526184]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 hasplms;@oem15.inf,%llmdisp%;Sentinel LDK License Manager; C:\WINDOWS\system32\hasplms.exe [2015-09-24 4665168]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-22 513144]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-08-22 462784]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-08-22 450168]
R2 OneSyncSvc_2ecfe;OneSyncSvc_2ecfe; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 PDF24;PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [2016-12-20 217736]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2017-05-23 1776864]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2017-05-23 2131760]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2017-05-23 233936]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-07 336320]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2017-09-03 7452288]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R3 PimIndexMaintenanceSvc_2ecfe;PimIndexMaintenanceSvc_2ecfe; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-26 153752]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-08 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc_2ecfe;DevicesFlowUserSvc_2ecfe; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 GalaxyClientService;GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2017-08-08 487488]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2017-08-08 8163392]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-26 153752]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService_2ecfe;MessagingService_2ecfe; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-22 513144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-08-28 1610016]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2017-03-18 302592]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]

-----------------EOF-----------------

Zdravím, v první řadě odinstaluj Spybot - SD.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.


Nakonec použij Mbam z mého podpisu a dej mi sem z něj log po smazání nepořádku.