VIRY.CZ

Zdravicko, poprosil by som preventivnu kontrolu logu. Mam podozrenie na virus. Vopred dakujem

Logfile of random's system information tool 1.10 (written by random/random)
Run by 15mat at 2017-10-04 19:50:31
Microsoft Windows 10 Home
System drive C: has 813 GB (90%) free of 906 GB
Total RAM: 8051 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:50:52, on 04.10.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0608)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
C:\Users\15mat\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\15mat\AppData\Local\Akamai\netsession_win.exe
C:\Users\15mat\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe
C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe
C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files\trend micro\15mat.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo15.msn.com/?pc=LCTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Lenovo Smart Fingerprint] "C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Autodesk Desktop App] "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
O4 - HKCU\..\Run: [OneDrive] "C:\Users\15mat\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\15mat\AppData\Local\Akamai\netsession_win.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Autodesk Desktop App Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Heroes & Generals Service (HnGService) - Reto-Moto ApS - C:\Program Files (x86)\Heroes & Generals\live\hngservice.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem51.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\igfxCUIService.exe
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @oem46.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem46.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 12668 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
winlogon.exe
"fontdrvhost.exe"
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-0d16fe57-5567-4b30-99a7-543362feb2d6 -SystemEventPortName:HostProcess-f8b9eeff-b301-455f-b405-a88bc4157d9a -IoCancelEventPortName:HostProcess-c04c950a-8df7-438e-9c85-04e037e78379 -NonStateChangingEventPortName:HostProcess-13c947b3-7876-4227-9487-d0a403dda75d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:196186f3-e433-426a-88a3-5e45bf3667b8 -DeviceGroupId:
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
C:\WINDOWS\system32\atiesrxx.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-40f0c988-5818-4ca1-b19a-e33397348632 -SystemEventPortName:HostProcess-65598c4c-3d0d-45c4-8868-7bc14f96f23c -IoCancelEventPortName:HostProcess-2d955c47-7c13-431b-9b46-67c77ce557e8 -NonStateChangingEventPortName:HostProcess-1c966bf2-2af1-4c71-a3c9-05ba496744a7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:db718581-53df-4f7c-bd61-beba76c6f20a -DeviceGroupId:WudfDefaultDevicePool
atieclxx
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k localservice -s nsi
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1992da9f-f85c-47b3-bdf8-7211e0cd77b8 -SystemEventPortName:HostProcess-34f2723a-8cbf-4808-a57b-b432efca4103 -IoCancelEventPortName:HostProcess-94088ab9-f64f-46ae-98b3-f303eada3379 -NonStateChangingEventPortName:HostProcess-814ee300-ba8e-4f4c-a6d1-a0425ccfdc3a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b2613629-0e9a-44ce-bce3-41ba46abba42 -DeviceGroupId:
c:\windows\system32\svchost.exe -k netsvcs -s SENS
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\igfxCUIService.exe
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -s FontCache
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s netprofm
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s EapHost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s dot3svc
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k wbiosvcgroup -s WbioSrvc
c:\windows\system32\svchost.exe -k localservicenonetwork
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
C:\WINDOWS\system32\WLANExt.exe 2339430132448
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe"
C:\WINDOWS\system32\ibtsiva
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
"c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
"C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe" -/service
C:\WINDOWS\System32\svchost.exe -k utcsvc
c:\windows\system32\svchost.exe -k netsvcs -s IKEEXT
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"

C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\valWbioSyncSvc.exe
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NgcSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent
c:\windows\system32\svchost.exe -k netsvcs -s Browser
sihost.exe
"C:\Program Files\Synaptics\SynFp\Shared\SensorDBSynch.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
C:\WINDOWS\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\igfxEM.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -s LicenseManager
-name fdacce79-f617-49c8-a552-55df8c385f9a -runas -pluginName LenovoAudioPlugin -pluginVersion 1.2.189.0
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SensorService
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s WdiSystemHost
"C:\Program Files\ESET\ESET Endpoint Security\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe"
"C:\Users\15mat\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\15mat\AppData\Local\Akamai\netsession_win.exe"
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
"C:/Users/15mat/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe" --approot=SOFTWARE\Autodesk --appAgent=/AUTODESKDESKTOPAPP/7.0.5.154/en-US/0001 --lang=en-US --cache-path="C:\Users\15mat\AppData\Local\Autodesk\Autodesk Desktop App\BrowserCache" --peerPid=10120
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe" --type=gpu-process --channel="10900.0.957312575\668050271" --no-sandbox --lang=en-US --log-severity=disable --peerpid=10120 --disable-image-transport-surface --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,27 --gpu-vendor-id=0x8086 --gpu-device-id=0x1916 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=21.20.16.4627 --lang=en-US --log-severity=disable --peerpid=10120 /prefetch:822062411
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s icssvc
c:\windows\system32\svchost.exe -k localservice -s SstpSvc
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe" --type=renderer --no-sandbox --lang=en-US --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --lang=en-US --log-severity=disable --peerpid=10120 --enable-software-compositing --channel="10900.1.1787719513\1273346647" /prefetch:673131151
c:\windows\system32\svchost.exe -k networkservice -s TapiSrv
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k netsvcs -s SharedAccess
C:\WINDOWS\System32\alg.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s upnphost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s Netman
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\IntelCpHeciSvc.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
c:\windows\system32\svchost.exe -k netsvcs -s DoSvc
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\15mat\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\15mat\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=61.0.3163.100 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ff9383d1988,0x7ff9383d1948,0x7ff9383d1958
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4924 --on-initialized-event-handle=68 --parent-handle=656 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1556,13854137703034902569,628988080409899730,131072 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=9,12,19,23,24,27,32,49,84 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x1002 --gpu-device-id=0x6660 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.201.1101.0 --gpu-driver-date=8-6-2015 --gpu-secondary-vendor-ids=0x8086 --gpu-secondary-device-ids=0x1916 --service-request-channel-token=25528096DD9528F921DD2691AD94DC48 --mojo-platform-channel-handle=1572 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1556,13854137703034902569,628988080409899730,131072 --service-pipe-token=A832DC7647E579B947935BA154105CB3 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=A832DC7647E579B947935BA154105CB3 --renderer-client-id=4 --mojo-platform-channel-handle=3116 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1556,13854137703034902569,628988080409899730,131072 --service-pipe-token=6AA81B2501B3CE041395CD048DDCCBE4 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=6AA81B2501B3CE041395CD048DDCCBE4 --renderer-client-id=5 --mojo-platform-channel-handle=3184 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1556,13854137703034902569,628988080409899730,131072 --service-pipe-token=C0F88F3DC0B9F83C473F5C95B84FFF31 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=C0F88F3DC0B9F83C473F5C95B84FFF31 --renderer-client-id=9 --mojo-platform-channel-handle=5928 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 692 696 704 8192 700
"C:\Users\15mat\Downloads\RSITx64.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -s gpsvc

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-08-24 229072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2017-02-23 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24 163536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2017-02-23 1743664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-07-17 16152792]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-07-14 1394392]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-07-14 1394392]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-07-14 1394392]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2015-07-25 36352]
"egui"=C:\Program Files\ESET\ESET Endpoint Security\egui.exe [2015-07-23 4150472]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-10-27 3947704]
"LenovoUtility"=C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [2017-07-27 911272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\15mat\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-09-19 1686736]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-11-15 9105112]
"Akamai NetSession Interface"=C:\Users\15mat\AppData\Local\Akamai\netsession_win.exe [2017-01-03 4490200]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Lenovo Smart Fingerprint"=C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-07-10 1758480]
"CLMLServer_For_P2G8"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [2014-09-09 110344]
"CLVirtualDrive"=C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [2014-09-09 492808]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-07 767176]
"Autodesk Desktop App"=C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [2017-03-10 704424]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2017-10-04 19:50:32 ----D---- C:\Program Files\trend micro
2017-10-04 19:50:31 ----D---- C:\rsit
2017-10-04 15:58:46 ----D---- C:\Users\15mat\AppData\Roaming\HeroesAndGeneralsDesktop
2017-10-04 15:47:47 ----D---- C:\Program Files (x86)\Heroes & Generals
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\WUDFUpdate_01009.dll
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\winusbcoinstaller2.dll
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01009.dll
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\hw_usbdev.sys
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\hw_quusbnet.sys
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\hw_quusbmdm.sys
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\hw_cdcacm.sys
2017-10-03 10:43:36 ----A---- C:\WINDOWS\system32\drivers\ew_usbccgpfilter.sys
2017-10-03 10:43:30 ----D---- C:\Program Files (x86)\HiSuite
2017-09-13 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2017-09-13 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-09-13 12:37:04 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-09-13 12:37:03 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-09-13 12:37:02 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-09-13 12:37:02 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-09-13 12:37:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-09-13 12:37:01 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-09-13 12:37:01 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-09-13 12:37:01 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-09-13 12:37:00 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-09-13 12:36:59 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2017-09-13 12:36:59 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-09-13 12:36:59 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-09-13 12:36:59 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-09-13 12:36:58 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-09-13 12:36:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-09-13 12:36:58 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-09-13 12:36:58 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-09-13 12:36:58 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-09-13 12:36:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-09-13 12:36:57 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-09-13 12:36:57 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-09-13 12:36:57 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\RstrtMgr.dll
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\CredentialUIBroker.exe
2017-09-13 12:36:56 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-09-13 12:36:55 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-09-13 12:36:55 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-09-13 12:36:55 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-09-13 12:36:54 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-09-13 12:36:53 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-09-13 12:36:51 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-09-13 12:36:51 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-09-13 12:36:51 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll
2017-09-13 12:36:50 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-09-13 12:36:49 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2017-09-13 12:36:48 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2017-09-13 12:36:48 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-09-13 12:36:48 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-09-13 12:36:48 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2017-09-13 12:36:47 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2017-09-13 12:36:47 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-09-13 12:36:47 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2017-09-13 12:36:47 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2017-09-13 12:36:47 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-09-13 12:36:47 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\SYSWOW64\dinput8.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-09-13 12:36:46 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2017-09-13 12:36:45 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2017-09-13 12:36:45 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2017-09-13 12:36:45 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-09-13 12:36:45 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-09-13 12:36:45 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2017-09-13 12:36:45 ----A---- C:\WINDOWS\system32\BthHFSrv.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2017-09-13 12:36:44 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2017-09-13 12:36:43 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2017-09-13 12:36:43 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2017-09-13 12:36:43 ----A---- C:\WINDOWS\SYSWOW64\rasman.dll
2017-09-13 12:36:43 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\shdocvw.dll
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\ntprint.exe
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\dinput.dll
2017-09-13 12:36:40 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2017-09-13 12:36:40 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2017-09-13 12:36:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-09-13 12:36:35 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-09-13 12:36:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-09-13 12:36:31 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-09-13 12:36:31 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-09-13 12:36:31 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-09-13 12:36:29 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2017-09-13 12:36:28 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2017-09-13 12:36:27 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-09-13 12:36:26 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-09-13 12:36:26 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2017-09-13 12:36:26 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-09-13 12:36:25 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2017-09-13 12:36:24 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2017-09-13 12:36:24 ----A---- C:\WINDOWS\system32\ngcrecovery.dll
2017-09-13 12:36:24 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2017-09-13 12:36:23 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-09-13 12:36:22 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-09-13 12:36:21 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-09-13 12:36:21 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-09-13 12:36:20 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-09-13 12:36:19 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-09-13 12:36:19 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-09-13 12:36:19 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2017-09-13 12:36:19 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-09-13 12:36:18 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-09-13 12:36:18 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-09-13 12:36:17 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-09-13 12:36:17 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-09-13 12:36:17 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2017-09-13 12:36:16 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2017-09-13 12:36:16 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-09-13 12:36:16 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-09-13 12:36:16 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-09-13 12:36:15 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-09-13 12:36:15 ----A---- C:\WINDOWS\system32\localspl.dll
2017-09-13 12:36:14 ----A---- C:\WINDOWS\system32\offreg.dll
2017-09-13 12:36:14 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-09-13 12:36:14 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-09-13 12:36:14 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-09-13 12:36:11 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2017-09-13 12:36:10 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-09-13 12:36:10 ----A---- C:\WINDOWS\system32\mfps.dll
2017-09-13 12:36:10 ----A---- C:\WINDOWS\system32\mfds.dll
2017-09-13 12:36:09 ----A---- C:\WINDOWS\system32\rasgcw.dll
2017-09-13 12:36:09 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2017-09-13 12:36:09 ----A---- C:\WINDOWS\system32\nettrace.dll
2017-09-13 12:36:09 ----A---- C:\WINDOWS\system32\msvproc.dll
2017-09-13 12:36:09 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2017-09-13 12:36:08 ----A---- C:\WINDOWS\system32\rasplap.dll
2017-09-13 12:36:08 ----A---- C:\WINDOWS\system32\rasdlg.dll
2017-09-13 12:36:08 ----A---- C:\WINDOWS\system32\ntprint.dll
2017-09-13 12:36:08 ----A---- C:\WINDOWS\system32\drivers\nsiproxy.sys
2017-09-13 12:36:08 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-09-13 12:36:07 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2017-09-13 12:36:07 ----A---- C:\WINDOWS\system32\spoolsv.exe
2017-09-13 12:36:07 ----A---- C:\WINDOWS\system32\SEMgrPS.dll
2017-09-13 12:36:07 ----A---- C:\WINDOWS\system32\ntprint.exe
2017-09-13 12:36:07 ----A---- C:\WINDOWS\system32\inetpp.dll
2017-09-13 12:36:06 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-09-13 12:36:06 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-09-13 12:36:06 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-09-13 12:36:06 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-09-13 12:36:06 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-09-13 12:36:05 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-09-13 12:36:05 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-09-13 12:36:05 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-09-13 12:36:05 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-09-13 12:36:04 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-09-13 12:36:03 ----A---- C:\WINDOWS\system32\wer.dll
2017-09-13 12:36:03 ----A---- C:\WINDOWS\system32\wc_storage.dll
2017-09-13 12:36:03 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-09-13 12:36:03 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-09-13 12:36:03 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-09-13 12:36:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-09-13 12:36:02 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-09-13 12:36:00 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-09-13 12:35:59 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-09-13 12:35:59 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-09-13 12:35:58 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2017-09-13 12:35:57 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2017-09-13 12:35:57 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-09-13 12:35:57 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2017-09-13 12:35:57 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-09-13 12:35:57 ----A---- C:\WINDOWS\system32\datamarketsvc.dll
2017-09-13 12:35:54 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-09-13 12:35:54 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2017-09-13 12:35:54 ----A---- C:\WINDOWS\system32\vss_ps.dll
2017-09-13 12:35:54 ----A---- C:\WINDOWS\system32\OpcServices.dll
2017-09-13 12:35:53 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-13 12:35:53 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-09-13 12:35:53 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-09-13 12:35:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-09-13 12:35:51 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-09-13 12:35:51 ----A---- C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-09-13 12:35:51 ----A---- C:\WINDOWS\system32\NotificationController.dll
2017-09-13 12:35:50 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-09-13 12:35:50 ----A---- C:\WINDOWS\system32\StartTileData.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\RstrtMgr.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\msIso.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-09-13 12:35:49 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-09-13 12:35:48 ----A---- C:\WINDOWS\system32\twinui.dll
2017-09-13 12:35:48 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-09-13 12:35:48 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-09-13 12:35:46 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-09-13 12:35:46 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-09-13 12:35:46 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-09-13 12:35:45 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-09-13 12:35:45 ----A---- C:\WINDOWS\system32\wininet.dll
2017-09-13 12:35:45 ----A---- C:\WINDOWS\system32\rpcss.dll
2017-09-13 12:35:45 ----A---- C:\WINDOWS\system32\combase.dll
2017-09-13 12:35:45 ----A---- C:\WINDOWS\explorer.exe
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-09-13 12:35:44 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\winsrvext.dll
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\werui.dll
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-09-13 12:35:43 ----A---- C:\WINDOWS\system32\cldapi.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-09-13 12:35:42 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-09-13 12:35:41 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-09-13 12:35:40 ----A---- C:\WINDOWS\system32\shell32.dll
2017-09-13 12:35:40 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-09-13 12:35:40 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2017-09-13 12:35:38 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-09-13 12:35:37 ----A---- C:\WINDOWS\system32\wpx.dll
2017-09-13 12:35:37 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-09-13 12:35:37 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-09-13 12:35:36 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-09-13 12:35:36 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-09-13 12:35:35 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-09-13 12:35:34 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-09-13 12:35:34 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-09-13 12:35:34 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-09-13 12:35:33 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2017-09-13 12:35:33 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-09-13 12:35:33 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-09-13 12:35:33 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-09-13 12:35:32 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-09-13 12:35:32 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\wevtapi.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\user32.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\SHCore.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-09-13 12:35:31 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-09-13 12:35:30 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2017-09-13 12:35:30 ----A---- C:\WINDOWS\system32\propsys.dll
2017-09-13 12:35:30 ----A---- C:\WINDOWS\system32\httpprxm.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\wisp.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\tdh.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\profsvc.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\PhoneService.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\dsreg.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\dinput8.dll
2017-09-13 12:35:29 ----A---- C:\WINDOWS\system32\csplte.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\win32u.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\tbs.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\setupapi.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\nltest.exe
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\EnterpriseAPNCsp.dll
2017-09-13 12:35:28 ----A---- C:\WINDOWS\system32\CfgSPCellular.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\wups.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\win32k.sys
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\srpapi.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\shdocvw.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\rasman.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\dinput.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\dab.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\authz.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-09-13 12:35:27 ----A---- C:\WINDOWS\system32\appidapi.dll
2017-09-07 08:53:43 ----D---- C:\Users\15mat\AppData\Roaming\dvdcss
2017-09-07 08:52:18 ----D---- C:\Users\15mat\AppData\Roaming\CyberLink

======List of files/folders modified in the last 1 month======

2017-10-04 19:50:32 ----RD---- C:\Program Files
2017-10-04 19:50:09 ----D---- C:\WINDOWS\Temp
2017-10-04 19:22:50 ----D---- C:\WINDOWS\System32
2017-10-04 19:22:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-04 19:21:47 ----RSD---- C:\WINDOWS\assembly
2017-10-04 19:19:01 ----D---- C:\WINDOWS\INF
2017-10-04 19:18:57 ----D---- C:\WINDOWS\Logs
2017-10-04 19:18:57 ----D---- C:\Windows
2017-10-04 19:18:49 ----HD---- C:\Program Files\WindowsApps
2017-10-04 19:17:54 ----D---- C:\WINDOWS\AppReadiness
2017-10-04 19:16:28 ----D---- C:\ProgramData\Synaptics
2017-10-04 19:15:54 ----D---- C:\WINDOWS\system32\sru
2017-10-04 19:08:14 ----D---- C:\WINDOWS\Prefetch
2017-10-04 19:08:14 ----AD---- C:\Program Files\KMSpico
2017-10-04 19:08:11 ----D---- C:\WINDOWS\system32\Tasks
2017-10-04 19:06:49 ----D---- C:\ProgramData\CyberLink
2017-10-04 19:03:27 ----SHDC---- C:\WINDOWS\Installer
2017-10-04 19:03:27 ----SHD---- C:\Config.Msi
2017-10-04 19:02:35 ----D---- C:\Program Files\Autodesk
2017-10-04 19:02:35 ----AD---- C:\Program Files\Common Files\Autodesk Shared
2017-10-04 19:02:22 ----AD---- C:\ProgramData\Autodesk
2017-10-04 19:00:25 ----D---- C:\WINDOWS\system32\config
2017-10-04 18:59:19 ----D---- C:\Program Files (x86)\Autodesk
2017-10-04 18:56:29 ----RD---- C:\WINDOWS\Microsoft.NET
2017-10-04 18:56:20 ----D---- C:\Users\15mat\AppData\Roaming\Autodesk
2017-10-04 18:56:19 ----RSD---- C:\WINDOWS\Fonts
2017-10-04 18:56:19 ----D---- C:\WINDOWS\SysWOW64
2017-10-04 18:56:02 ----SD---- C:\WINDOWS\Downloaded Program Files
2017-10-04 18:49:39 ----D---- C:\WINDOWS\system32\catroot2
2017-10-04 17:42:22 ----SHD---- C:\System Volume Information
2017-10-04 17:10:41 ----D---- C:\WINDOWS\system32\DriverStore
2017-10-04 17:10:25 ----D---- C:\WINDOWS\WinSxS
2017-10-04 16:55:30 ----D---- C:\WINDOWS\rescache
2017-10-04 16:00:22 ----SD---- C:\ProgramData\Microsoft
2017-10-04 15:47:47 ----RD---- C:\Program Files (x86)
2017-10-03 21:31:57 ----D---- C:\WINDOWS\system32\NDF
2017-10-03 12:12:34 ----D---- C:\WINDOWS\LiveKernelReports
2017-10-03 10:43:36 ----D---- C:\WINDOWS\system32\drivers
2017-10-03 10:43:34 ----D---- C:\WINDOWS\system32\CatRoot
2017-09-29 13:39:46 ----D---- C:\WINDOWS\debug
2017-09-24 12:37:08 ----RD---- C:\Maťo
2017-09-23 19:15:06 ----D---- C:\Users\15mat\AppData\Roaming\vlc
2017-09-14 10:11:27 ----D---- C:\ProgramData\Microsoft Help
2017-09-14 09:55:27 ----D---- C:\WINDOWS\system32\WDI
2017-09-13 22:41:20 ----D---- C:\WINDOWS\SYSWOW64\wbem
2017-09-13 22:41:20 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2017-09-13 22:41:19 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-09-13 22:41:19 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-09-13 22:41:19 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-09-13 22:41:13 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-09-13 22:41:13 ----D---- C:\WINDOWS\system32\wbem
2017-09-13 22:41:13 ----D---- C:\WINDOWS\system32\sk-SK
2017-09-13 22:41:12 ----SD---- C:\WINDOWS\system32\F12
2017-09-13 22:41:12 ----D---- C:\WINDOWS\system32\sk
2017-09-13 22:41:12 ----D---- C:\WINDOWS\system32\setup
2017-09-13 22:41:11 ----D---- C:\WINDOWS\system32\en-US
2017-09-13 22:41:11 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-09-13 22:41:07 ----D---- C:\WINDOWS\ShellExperiences
2017-09-13 22:41:02 ----D---- C:\Program Files\Windows Photo Viewer
2017-09-13 22:41:02 ----D---- C:\Program Files\Windows Mail
2017-09-13 22:41:02 ----D---- C:\Program Files\Internet Explorer
2017-09-13 22:41:02 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-09-13 22:41:02 ----D---- C:\Program Files (x86)\Windows Mail
2017-09-13 22:41:02 ----D---- C:\Program Files (x86)\Internet Explorer
2017-09-13 13:18:08 ----D---- C:\WINDOWS\system32\MRT
2017-09-13 13:09:24 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-09-13 13:09:09 ----D---- C:\WINDOWS\CbsTemp
2017-09-13 12:42:56 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2015-07-14 67792]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2015-07-25 1455552]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-13 91912]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-07-14 245952]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-07-14 179544]
R1 EpfwLWF;@oem38.inf,%EpfwLWF_Desc%;Epfw NDIS LightWeight Filter; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2015-07-14 49240]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192]
R1 SMIDriver;@oem46.inf,%SMIDevice.SVCDESC%;Synaptics SMI Driver; C:\WINDOWS\system32\DRIVERS\smi.sys [2016-10-29 39488]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2015-07-14 222256]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-03-18 79872]
R3 ACPIVPC;@oem1.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-06-15 42328]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-08-22 21643288]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-08-22 675840]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2017-03-18 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664]
R3 ibtusb;@oem51.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2017-04-13 244744]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\igdkmd64.sys [2017-04-21 11070456]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-07-21 4589784]
R3 IntcDAud;@oem28.inf,%IntcAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-12-05 820752]
R3 MEIx64;@oem45.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2015-07-08 184608]
R3 Netwtw04;@oem26.inf,%NIC_Service_DispName_WINT_64%;Intel(R) Wireless Adapter Driver for Windows 10 - 64 Bit; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [2017-01-24 7932160]
R3 RSP2STOR;@oem23.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-05-21 310528]
R3 rt640x64;@oem12.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-30 886528]
R3 rtsuvc;@oem13.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2015-06-11 3059416]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2016-10-27 44216]
R3 SynTP;@oem2.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2016-10-27 620744]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2017-03-18 36760]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2017-07-28 105472]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2017-07-28 97280]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2017-09-05 130560]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2017-07-28 982016]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-05 39424]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880]
S3 dg_ssudbus;@oem5.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2017-05-18 131984]
S3 dot4;@oem8.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem20.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem8.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2017-08-01 180736]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]
S3 ssudmdm;@oem14.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2017-05-18 166288]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Desktop App Service; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [2017-03-10 1309176]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-08-22 257024]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CDPUserSvc_847d4;Connected Devices Platform User Service_847d4; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [2015-07-27 1042064]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2016-12-27 640928]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [2016-11-25 192200]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2015-07-22 18856]
R2 ibtsiva;@oem51.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\WINDOWS\system32\ibtsiva []
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\igfxCUIService.exe [2017-04-21 341496]
R2 ImControllerService;System Interface Foundation Service; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2017-06-05 57160]
R2 OneSyncSvc_847d4;Sync Host_847d4; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2016-12-27 157600]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-07 336320]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\IntelCpHeciSvc.exe [2017-04-21 303096]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
R3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 PimIndexMaintenanceSvc_847d4;Kontaktné údaje_847d4; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-27 153752]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_b9b9c39e4e2b88eb\IntelCpHDCPSvc.exe [2017-04-21 480760]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc_847d4;DevicesFlow_847d4; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [2015-07-08 44744]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [2015-07-08 192200]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2017-04-19 1357104]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-27 153752]
S3 HnGService;Heroes & Generals Service; C:\Program Files (x86)\Heroes & Generals\live\hngservice.exe [2017-10-04 777000]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-07-18 271296]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService_847d4;MessagingService_847d4; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2016-12-27 268704]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]

-----------------EOF-----------------

Zdravím,

proč v domácím PC je takováhle verze antiviru od Esetu ?


Stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.


Pak použij Mbam z mého podpisu a dej i sem z něj log po smazání nepořádku.

zdravicko, ospravedlnujem ze logy pridavam az teraz ale nemal som cas. Pocitac som daval znamenu nech mi tam da zakladne programy a dal mi tam aj tento eset.

# AdwCleaner 7.0.3.1 - Logfile created on Tue Oct 10 16:35:40 2017
# Updated on 2017/29/09 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

Plugin deleted: Video Ad Blocker Plus -


*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1112 B] - [2017/10/10 16:35:22]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Malwarebytes
www.malwarebytes.com

-Podrobnosti denníka-
Dátum skenovania: 10.10.17
Čas skenovania: 18:44
Súbor denníka: 59acbd66-adda-11e7-b452-1c39472a2b98.json
Správca: Áno

-Údaje o softvéri-
Verzia: 3.2.2.2029
Verzia súčastí: 1.0.212
Aktualizovať verziu balíka: 1.0.2987
Licencia: Skúšobná verzia

-Systémové informácie-
OS: Windows 10 (Build 15063.608)
Procesor: x64
Systém súborov: NTFS
Používateľ: LAPTOP-5D5A0KLL\15mat

-Zhrnutie skenovania-
Typ skenovania: Vlastné skenovanie
Výsledok: Dokončené
Preskenované objekty: 418128
Zistené hrozby: 0
(Nezistili sa nijaké škodlivé položky)
Hrozby umiestnené do karantény: 0
(Nezistili sa nijaké škodlivé položky)
Uplynulý čas: 3 h, 58 min, 36 s

-Možnosti skenovania-
Pamäť: Povolené
Spúšťanie: Povolené
Systém súborov: Povolené
Archívy: Povolené
Rootkity: Povolené
Heuristika: Povolené
PUP: Zistiť
PUM: Zistiť

-Podrobnosti skenovania-
Proces: 0
(Nezistili sa nijaké škodlivé položky)

Modul: 0
(Nezistili sa nijaké škodlivé položky)

Kľúč databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Hodnota databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Údaje databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Prúd údajov: 0
(Nezistili sa nijaké škodlivé položky)

Priečinok: 0
(Nezistili sa nijaké škodlivé položky)

Súbor: 0
(Nezistili sa nijaké škodlivé položky)

Fyzický sektor: 0
(Nezistili sa nijaké škodlivé položky)


(end)

jetam55 píše:Pocitac som daval znamenu nech mi tam da zakladne programy a dal mi tam aj tento eset.

Pokud je legální tak v pořádku i když se mi to moc nezdá.


Spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

Total 12679553792 bytes in 43854 files scanned (49174 objects)
Total 43991 files (49129 objects) are clean
There are no infected objects detected
Total 43 files are raised error condition
Scan time is 00:14:35.398

Bezva čisto, jak se PC chová po úklidu ?

Zdravím , ďakujem moc . PC ide super

Není zač a