VIRY.CZ

Dobrý den, moc prosím o kontrolu logu. Předem děkuji.

ČÁST 1.


Logfile of random's system information tool 1.16 (written by random/random)
Run by denny at 2017-12-13 18:05:09
Microsoft Windows 10 Home
System drive C: has 49 GB (43%) free of 114 GB
Total RAM: 16327 MB (80% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:12, on 13.12.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0098)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files\trend micro\denny_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://egate.proficredit.cz/marketing/K5/index.php#
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [uTorrent] "C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - D:\Programy\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 8423 bytes

====== Enumerating Processes ======

C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
C:\WINDOWS\system32\fontdrvhost.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\fontdrvhost.exe
C:\WINDOWS\system32\dwm.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k localservice -p -s nsi
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localservicenonetwork -p
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
C:\WINDOWS\system32\PnkBstrA.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
C:\WINDOWS\system32\dashost.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_00000aa8
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localservice -p -s fdPHost
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s FDResPub
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s HomeGroupProvider
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%dSPUser.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\SPUser" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
c:\windows\system32\sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
c:\windows\system32\taskhostw.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe"
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --disable-gpu-compositing --no-sandbox --service-pipe-token=B2184FBF44734485C853DE6DE4FB0395 --lang=en-US --lang=en-US --log-file="C:\Users\denny\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\debug.log" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --enable-gpu-async-worker-context --service-request-channel-token=B2184FBF44734485C853DE6DE4FB0395 --renderer-client-id=2 --mojo-platform-channel-handle=1820 /prefetch:1
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x414
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
c:\windows\system32\taskhostw.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\denny\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\denny\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\denny\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=63.0.3239.84 --initial-client-data=0x1d0,0x1d4,0x1d8,0x1cc,0x1dc,0x7ffb084b5720,0x7ffb084b5760,0x7ffb084b5738
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4160 --on-initialized-event-handle=636 --parent-handle=640 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=23.21.13.8859 --gpu-driver-date=12-5-2017 --service-request-channel-token=51D950373E2F42B4E217EE0353C12CC0 --mojo-platform-channel-handle=1464 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=C8B0C23F17FA6C7318137F1BC694BD85 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=C8B0C23F17FA6C7318137F1BC694BD85 --renderer-client-id=4 --mojo-platform-channel-handle=2932 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=B78274B237A225B8FDF219FDC727FE02 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=B78274B237A225B8FDF219FDC727FE02 --renderer-client-id=5 --mojo-platform-channel-handle=2972 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=B5E4412AA49CFEA34E47D1F2FD070E53 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=B5E4412AA49CFEA34E47D1F2FD070E53 --renderer-client-id=6 --mojo-platform-channel-handle=3036 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=99AC9EB931FEBA7CF390701FEBDF27D6 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=99AC9EB931FEBA7CF390701FEBDF27D6 --renderer-client-id=7 --mojo-platform-channel-handle=3004 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=02CA8A11D10B24C2BB069426FD288CE1 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=02CA8A11D10B24C2BB069426FD288CE1 --renderer-client-id=11 --mojo-platform-channel-handle=5156 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=1A241EAA8E074E69CB5D10D19C3582DD --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=1A241EAA8E074E69CB5D10D19C3582DD --renderer-client-id=13 --mojo-platform-channel-handle=5272 /prefetch:1
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=314E9D2395A81F71D9476BAB176D030C --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=314E9D2395A81F71D9476BAB176D030C --renderer-client-id=15 --mojo-platform-channel-handle=7388 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=F709E470DD9D6FD2526AACF3D151F22F --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=F709E470DD9D6FD2526AACF3D151F22F --renderer-client-id=16 --mojo-platform-channel-handle=1412 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=6DA849A2D9CE106BBBDB4E034FF2CFFE --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=6DA849A2D9CE106BBBDB4E034FF2CFFE --renderer-client-id=17 --mojo-platform-channel-handle=5592 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 740 744 752 8192 748
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=1CAE8EA17FEA76EBC170D8311FAAA610 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=1CAE8EA17FEA76EBC170D8311FAAA610 --renderer-client-id=18 --mojo-platform-channel-handle=7844 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1448,12283645667214907445,1980446308086571767,131072 --service-pipe-token=99856F6ED8149C67B7D01DD1C62B48C3 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=99856F6ED8149C67B7D01DD1C62B48C3 --renderer-client-id=20 --mojo-platform-channel-handle=8032 /prefetch:1
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
"C:\Users\denny\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

====== Scheduled tasks folder ======

C:\WINDOWS\tasks\DriverToolkit Autorun.job - C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe --autorun
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Avira SystrayStartTrigger - Avira.SystrayStartTrigger.exe
C:\WINDOWS\system32\tasks\Avira_Antivirus_Systray - "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
C:\WINDOWS\system32\tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe"
C:\WINDOWS\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
C:\WINDOWS\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\WINDOWS\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\WINDOWS\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\WINDOWS\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\WINDOWS\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Kejtiinka\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task-S-1-5-21-3947013919-736150964-4177258884-1001 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task-S-1-5-21-3947013919-736150964-4177258884-1004 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\{BC1A2B87-9BF6-4CCF-9D8E-235AB2C80CDE} - C:\WINDOWS\system32\pcalua.exe -a D:\UT2004\System\UT2004.exe -d D:\UT2004\System
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\WwanSvc\NotificationTask - %SystemRoot%\System32\WiFiTask.exe wwan
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Recovery-Check - %SystemRoot%\System32\dsregcmd.exe /checkrecovery
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WaaSMedic\PerformRemediation - %systemroot%\System32\WaaSMedic.exe None
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe Reboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display - %systemroot%\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr - %windir%\System32\UNP\UpdateNotificationMgr.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe -e
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\SMB\UninstallSMB1ClientTask - %windir%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client"
C:\WINDOWS\system32\tasks\Microsoft\Windows\SMB\UninstallSMB1ServerTask - %windir%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\PushToInstall\LoginCheck - %windir%\system32\sc.exe start pushtoinstall login
C:\WINDOWS\system32\tasks\Microsoft\Windows\PushToInstall\Registration - %windir%\system32\sc.exe start pushtoinstall registration
C:\WINDOWS\system32\tasks\Microsoft\Windows\Printing\EduPrintProv - %windir%\system32\eduprintprov.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Cellular - %windir%\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5 /source LogonIdleTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Chkdsk\SyspartRepair - %windir%\system32\bcdboot.exe %windir% /sysrepair
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Google Chrome=========

C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 0 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 0 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bgjpfhpjcgdppjbgnpnjllokbmcdllig 1 Seznam pro Chrome - Email 4.0.13
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.13.4
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 1 Adobe Acrobat 15.1.0.6
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 0 Tabulky 1.2
Extension flliilndjeohchalpbbcdekjklbdgfkk 1 Avira Browser Safety 2.4.2.1650
Extension fpmaepaboafhefdejcbiciklgjogoghf 1 Trevx - Music Downloader 4.1.1.0
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 0 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.5
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6317.1002.0.5
Homepage: http://www.seznam.cz/
default_search_provider.search_url:
C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe [2015-02-22 416168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableFullTrustStartupTasks"=2
"EnableUIADesktopToggle"=0
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath" = %SystemRoot%\inf\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

ČÁST 2.

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-12-13 18:05:09 ----D---- C:\rsit
2017-12-13 18:05:09 ----D---- C:\Program Files\trend micro
2017-12-13 13:32:02 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2017-12-13 13:31:42 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2017-12-13 13:31:42 ----A---- C:\WINDOWS\system32\OpenCL.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvopencl.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvdispgenco6438859.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvdispco6438859.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvcuda.dll
2017-12-13 13:30:22 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2017-12-13 12:22:18 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-13 12:22:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-13 12:22:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-12-13 12:22:17 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-12-13 12:22:15 ----A---- C:\WINDOWS\system32\shell32.dll
2017-12-13 12:22:14 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-12-13 12:22:14 ----A---- C:\WINDOWS\system32\StartTileData.dll
2017-12-13 12:22:14 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-12-13 12:22:13 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-12-13 12:22:13 ----A---- C:\WINDOWS\system32\twinui.dll
2017-12-13 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-12-13 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-12-13 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-12-13 12:22:12 ----A---- C:\WINDOWS\explorer.exe
2017-12-13 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-12-13 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-12-13 12:22:11 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-12-13 12:22:11 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-12-13 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-12-13 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-12-13 12:22:10 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\sppwinob.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\pnidui.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\InstallService.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-12-13 12:22:09 ----A---- C:\WINDOWS\system32\audiodg.exe
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\gamingtcui.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\vac.exe
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\user32.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\jscript.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\gamingtcui.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\edgeIso.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\ci.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-13 12:22:08 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\wscript.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\msvcrt.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\wscript.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\wimserv.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\wimgapi.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\sspicli.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\sppsvc.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\schedsvc.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\scrobj.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\msvcrt.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\msIso.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\mispace.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\FSClient.dll
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\cscript.exe
2017-12-13 12:22:07 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\SYSWOW64\batmeter.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\tzres.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\sppcext.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\slcext.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\PushToInstall.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\itss.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\hascsp.dll
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2017-12-13 12:22:06 ----A---- C:\WINDOWS\system32\batmeter.dll
2017-12-07 18:07:42 ----D---- C:\ProgramData\USOShared
2017-12-07 18:07:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-07 18:05:29 ----D---- C:\ProgramData\Microsoft OneDrive
2017-12-07 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2017-12-07 17:58:25 ----SD---- C:\Users\denny\AppData\Roaming\Microsoft
2017-12-07 17:58:09 ----AS---- C:\WINDOWS\bootstat.dat
2017-12-07 17:57:31 ----D---- C:\WINDOWS\system32\SleepStudy
2017-12-07 17:57:31 ----D---- C:\WINDOWS\Prefetch
2017-12-07 17:57:30 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-07 17:55:56 ----D---- C:\Windows.old
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avusbflt.sys
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avnetflt.sys
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2017-12-07 09:43:01 ----A---- C:\WINDOWS\system32\drivers\avdevprot.sys
2017-12-07 09:39:27 ----D---- C:\WINDOWS\system32\Microsoft
2017-12-07 09:39:27 ----D---- C:\WINDOWS\ServiceProfiles
2017-12-07 09:36:37 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-12-07 09:36:37 ----A---- C:\WINDOWS\system32\wmp.dll
2017-12-07 09:36:23 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-12-07 09:36:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-12-07 09:36:23 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-12-07 09:36:23 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\msvproc.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-12-07 09:36:22 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-07 09:36:21 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-07 09:36:21 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-07 09:36:21 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-07 09:36:21 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-12-07 09:36:21 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2017-12-07 09:36:15 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2017-12-07 09:36:15 ----A---- C:\WINDOWS\system32\evr.dll
2017-12-07 09:36:14 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-12-07 09:36:13 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-12-07 09:36:11 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2017-12-07 09:36:10 ----A---- C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-07 09:36:10 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2017-12-07 09:36:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2017-12-07 09:36:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2017-12-07 09:36:09 ----A---- C:\WINDOWS\SYSWOW64\AcSpecfc.dll
2017-12-07 09:36:09 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2017-12-07 09:36:08 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2017-12-07 09:35:57 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\t2embed.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\msdtcVSp1res.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2017-12-07 09:35:56 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Services.TargetedContent.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-12-07 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\smartscreenps.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\ExecModelClient.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\d3d9on12.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-12-07 09:35:54 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\SYSWOW64\SpatializerApo.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\SYSWOW64\ContentDeliveryManager.Utilities.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\SYSWOW64\CapabilityAccessManagerClient.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\wlansec.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2017-12-07 09:35:53 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\wininet.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\Spectrum.exe
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\provtool.exe
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\provhandlers.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\provengine.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2017-12-07 09:35:52 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\t2embed.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2017-12-07 09:35:51 ----A---- C:\WINDOWS\system32\d3d9.dll
2017-12-07 09:35:50 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\hal.dll
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-07 09:35:50 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\winresume.exe
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\winload.exe
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\apphelp.dll
2017-12-07 09:35:49 ----A---- C:\WINDOWS\system32\aadjcsp.dll
2017-12-07 09:35:48 ----A---- C:\WINDOWS\system32\SRH.dll
2017-12-07 09:35:48 ----A---- C:\WINDOWS\system32\devinv.dll
2017-12-07 09:35:48 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-12-07 09:35:48 ----A---- C:\WINDOWS\system32\acppage.dll
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\wow64win.dll
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\wow64.dll
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-12-07 09:35:47 ----A---- C:\WINDOWS\system32\DictationManager.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AcSpecfc.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AcLayers.dll
2017-12-07 09:35:46 ----A---- C:\WINDOWS\system32\AcGenral.dll
2017-12-07 09:35:45 ----A---- C:\WINDOWS\system32\msctf.dll
2017-12-07 09:35:40 ----A---- C:\WINDOWS\system32\services.exe
2017-12-07 09:35:40 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-07 09:35:39 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-07 09:35:39 ----A---- C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\FaceProcessor.dll
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\drivers\urscx01000.sys
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2017-12-07 09:35:37 ----A---- C:\WINDOWS\system32\BioIso.exe
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\ISM.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\d3d9on12.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2017-12-07 09:35:36 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\smartscreenps.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-07 09:35:35 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\SpatializerApo.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-07 09:35:34 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\usocore.dll
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\usoapi.dll
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-07 09:35:33 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\SYSWOW64\rdrleakdiag.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\winmde.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\runexehelper.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-12-07 09:35:32 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\SYSWOW64\AcLayers.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\umpo.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\samsrv.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2017-12-07 09:35:31 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2017-12-07 09:35:30 ----A---- C:\WINDOWS\system32\drivers\storufs.sys
2017-12-07 09:35:30 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-12-07 09:35:29 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-12-07 09:24:39 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2017-12-07 09:24:36 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-12-07 09:24:36 ----D---- C:\Program Files (x86)\MSBuild
2017-12-07 09:24:35 ----D---- C:\Program Files\Reference Assemblies
2017-12-07 09:24:35 ----D---- C:\Program Files\MSBuild
2017-12-07 09:23:51 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-07 09:23:51 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-07 09:23:50 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2017-12-07 09:23:50 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-07 09:23:49 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2017-12-07 09:23:49 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-12-07 08:33:48 ----DC---- C:\WINDOWS\Panther
2017-11-30 17:36:15 ----A---- C:\WINDOWS\system32\nvhdap64.dll
2017-11-30 17:36:15 ----A---- C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-11-30 17:36:15 ----A---- C:\WINDOWS\system32\drivers\nvvhci.sys
2017-11-30 17:36:15 ----A---- C:\WINDOWS\system32\drivers\nvhda64v.sys
2017-11-30 16:46:33 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2017-11-30 16:46:33 ----A---- C:\WINDOWS\system32\nvdispgenco6438843.dll
2017-11-30 16:46:33 ----A---- C:\WINDOWS\system32\nvdispco6438843.dll
2017-11-30 16:46:33 ----A---- C:\WINDOWS\system32\nvapi64.dll
2017-11-16 15:56:32 ----D---- C:\Users\denny\AppData\Roaming\VS Revo Group
2017-11-16 15:52:03 ----D---- C:\Users\denny\AppData\Roaming\Origin
2017-11-16 10:46:27 ----A---- C:\WINDOWS\system32\nvdispgenco6438831.dll
2017-11-16 10:46:27 ----A---- C:\WINDOWS\system32\nvdispco6438831.dll

====== List of files/folders modified in the last 1 month ======

2017-12-13 18:05:09 ----RD---- C:\Program Files
2017-12-13 18:04:59 ----D---- C:\WINDOWS\Temp
2017-12-13 18:04:54 ----D---- C:\Users\denny\AppData\Roaming\uTorrent
2017-12-13 17:59:11 ----SHDC---- C:\WINDOWS\Installer
2017-12-13 17:58:58 ----D---- C:\WINDOWS\INF
2017-12-13 17:58:57 ----D---- C:\WINDOWS\system32\catroot2
2017-12-13 17:40:43 ----D---- C:\WINDOWS\System32
2017-12-13 17:35:40 ----D---- C:\WINDOWS\system32\WDI
2017-12-13 17:34:40 ----D---- C:\WINDOWS\AppReadiness
2017-12-13 17:34:26 ----D---- C:\ProgramData\NVIDIA
2017-12-13 17:34:19 ----RD---- C:\WINDOWS\Microsoft.NET
2017-12-13 17:34:07 ----D---- C:\WINDOWS\system32\config
2017-12-13 17:34:05 ----D---- C:\WINDOWS\WinSxS
2017-12-13 17:34:05 ----D---- C:\Windows
2017-12-13 17:34:02 ----D---- C:\WINDOWS\system32\DriverStore
2017-12-13 17:33:45 ----D---- C:\WINDOWS\SysWOW64
2017-12-13 17:33:45 ----D---- C:\WINDOWS\system32\drivers
2017-12-13 17:32:51 ----D---- C:\WINDOWS\system32\sru
2017-12-13 17:32:41 ----D---- C:\WINDOWS\TextInput
2017-12-13 17:32:41 ----D---- C:\WINDOWS\SYSWOW64\Dism
2017-12-13 17:32:40 ----D---- C:\WINDOWS\system32\oobe
2017-12-13 17:32:40 ----D---- C:\WINDOWS\system32\migration
2017-12-13 17:32:40 ----D---- C:\WINDOWS\system32\Dism
2017-12-13 17:32:40 ----D---- C:\WINDOWS\system32\appraiser
2017-12-13 17:32:40 ----D---- C:\WINDOWS\apppatch
2017-12-13 14:22:00 ----D---- C:\Users\denny\AppData\Roaming\vlc
2017-12-13 14:19:24 ----D---- C:\WINDOWS\DeliveryOptimization
2017-12-13 14:19:07 ----D---- C:\Program Files (x86)\Rockstar Games
2017-12-13 14:18:58 ----D---- C:\Program Files\Rockstar Games
2017-12-13 13:32:23 ----D---- C:\Temp
2017-12-13 13:32:22 ----D---- C:\ProgramData\NVIDIA Corporation
2017-12-13 13:31:58 ----D---- C:\Program Files (x86)\VulkanRT
2017-12-13 12:24:37 ----D---- C:\WINDOWS\system32\MRT
2017-12-13 12:24:37 ----D---- C:\WINDOWS\CbsTemp
2017-12-13 12:23:32 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-13 12:23:30 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-12-13 12:20:29 ----D---- C:\WINDOWS\Logs
2017-12-13 12:19:28 ----HD---- C:\Program Files\WindowsApps
2017-12-11 21:30:59 ----SD---- C:\ProgramData\Microsoft
2017-12-11 08:12:49 ----D---- C:\WINDOWS\rescache
2017-12-10 07:17:50 ----RD---- C:\WINDOWS\assembly
2017-12-10 07:16:43 ----D---- C:\WINDOWS\system32\LogFiles
2017-12-08 17:11:33 ----D---- C:\WINDOWS\system32\Tasks
2017-12-08 17:10:11 ----D---- C:\WINDOWS\appcompat
2017-12-07 18:11:36 ----D---- C:\WINDOWS\system32\CodeIntegrity
2017-12-07 18:07:42 ----HD---- C:\ProgramData
2017-12-07 18:07:42 ----D---- C:\ProgramData\USOPrivate
2017-12-07 18:03:34 ----D---- C:\Program Files\windows nt
2017-12-07 18:02:59 ----D---- C:\WINDOWS\Registration
2017-12-07 18:02:49 ----D---- C:\WINDOWS\debug
2017-12-07 18:02:43 ----D---- C:\WINDOWS\SoftwareDistribution
2017-12-07 18:02:41 ----D---- C:\WINDOWS\Tasks
2017-12-07 18:01:55 ----D---- C:\WINDOWS\system32\wbem
2017-12-07 17:59:20 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-12-07 17:58:25 ----RD---- C:\Users
2017-12-07 17:58:10 ----SHD---- C:\Recovery
2017-12-07 17:58:09 ----D---- C:\WINDOWS\system32\Sysprep
2017-12-07 17:57:51 ----D---- C:\Program Files\NVIDIA Corporation
2017-12-07 17:55:58 ----RSD---- C:\WINDOWS\Fonts
2017-12-07 17:55:58 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-12-07 17:55:58 ----D---- C:\WINDOWS\SYSWOW64\logs
2017-12-07 17:55:58 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\zh-HK
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\WinBioDatabase
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\spool
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\NDF
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\en-US
2017-12-07 17:55:58 ----D---- C:\WINDOWS\system32\drivers\etc
2017-12-07 17:55:58 ----D---- C:\WINDOWS\LiveKernelReports
2017-12-07 17:55:57 ----RD---- C:\Program Files (x86)
2017-12-07 17:55:57 ----D---- C:\WINDOWS\system32\Recovery
2017-12-07 17:55:57 ----D---- C:\WINDOWS\Help
2017-12-07 17:55:57 ----D---- C:\Program Files\Intel
2017-12-07 17:55:57 ----D---- C:\Program Files\Common Files\microsoft shared
2017-12-07 17:55:57 ----D---- C:\Program Files\Common Files
2017-12-07 17:55:57 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-12-07 17:55:57 ----D---- C:\Program Files (x86)\Common Files
2017-12-07 17:55:57 ----AD---- C:\Program Files\UNP
2017-12-07 10:44:59 ----SHD---- C:\System Volume Information
2017-12-07 09:43:11 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2017-12-07 09:42:10 ----D---- C:\Program Files (x86)\Windows Mail
2017-12-07 09:42:09 ----D---- C:\Program Files\Windows Mail
2017-12-07 09:37:48 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-12-07 09:37:48 ----SD---- C:\WINDOWS\system32\F12
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\wbem
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2017-12-07 09:37:48 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\zu-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\yo-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\xh-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\wo-SN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\WinMetadata
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\vi-VN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ur-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ug-CN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\tt-RU
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\tn-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\tk-TM
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ti-ET
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\te-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ta-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\sw-KE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\sq-AL
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\si-LK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\rw-RW
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\quz-PE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\prs-AF
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\pa-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\or-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\nso-ZA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\nn-NO
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ne-NP
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\mt-MT
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ms-MY
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\mr-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\mn-MN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ml-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\mk-MK
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\mi-NZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\lo-LA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\lb-LU
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ky-KG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\kok-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\kn-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\km-KH
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\kk-KZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ka-GE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\is-IS
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ig-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\id-ID
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\chr-CHER-US
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\hy-AM
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\gu-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\gd-GB
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ga-IE
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\fil-PH
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\fa-IR
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\cy-GB
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\cs-CZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\Boot
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\bn-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\bn-BD
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\be-BY
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\as-IN
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\am-ET
2017-12-07 09:37:48 ----D---- C:\WINDOWS\system32\af-ZA
2017-12-07 09:37:47 ----D---- C:\WINDOWS\ShellExperiences
2017-12-07 09:37:47 ----D---- C:\WINDOWS\Provisioning
2017-12-07 09:37:47 ----D---- C:\Program Files\Windows Defender
2017-12-07 09:37:47 ----D---- C:\Program Files\internet explorer
2017-12-07 09:37:47 ----D---- C:\Program Files (x86)\Internet Explorer
2017-12-07 09:37:46 ----D---- C:\PerfLogs
2017-12-07 09:24:39 ----D---- C:\WINDOWS\SYSWOW64\MUI
2017-12-07 09:24:39 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-12-07 09:24:39 ----D---- C:\WINDOWS\system32\MUI
2017-12-05 20:56:22 ----A---- C:\WINDOWS\NvContainerRecovery.bat
2017-12-05 20:32:46 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2017-12-05 20:32:46 ----A---- C:\WINDOWS\system32\nvcpl.dll
2017-12-05 20:32:44 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2017-12-05 20:32:44 ----A---- C:\WINDOWS\system32\nvshext.dll
2017-12-05 20:32:44 ----A---- C:\WINDOWS\system32\nvmctray.dll
2017-12-05 20:32:44 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2017-12-05 20:32:44 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2017-12-03 23:38:40 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2017-11-29 10:41:42 ----D---- C:\ProgramData\Package Cache
2017-11-16 15:55:41 ----D---- C:\ProgramData\Origin
2017-11-16 02:41:18 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2017-11-16 02:41:18 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2017-11-16 02:41:17 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-11-16 02:41:12 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2017-11-16 02:41:12 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2017-11-16 01:53:22 ----A---- C:\WINDOWS\NvTelemetryContainerRecovery.bat

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 avdevprot;avdevprot; C:\WINDOWS\system32\DRIVERS\avdevprot.sys [2017-06-14 60920]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-09-29 56728]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2017-12-12 169376]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2017-03-03 44488]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2017-12-08 59800]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2015-06-08 127760]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2017-12-12 178840]
R2 avnetflt;avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [2017-03-03 88488]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-09-29 384000]
R3 NVHDA;@oem18.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2017-11-28 225208]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c68c1eb90f6d242e\nvlddmkm.sys [2017-12-06 17025992]
R3 nvvad_WaveExtensible;@oem4.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2017-10-11 50624]
R3 nvvhci;@oem13.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2017-11-28 57792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-09-29 604160]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2017-09-29 37784]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-09-29 357272]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-09-29 63520]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2017-09-29 39832]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-09-29 118168]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-09-29 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-09-29 18432]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-09-29 60312]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2016-09-05 131712]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-09-29 73112]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2017-09-29 27136]
S3 HyperVideo;HyperVideo; C:\WINDOWS\System32\drivers\HyperVideo.sys [2017-09-29 28160]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-09-29 1723288]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-09-29 36864]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-09-29 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-09-29 88576]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-09-29 174592]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-09-29 39424]
S3 invdimm;@invdimm.inf,%invdimm.SvcDesc%;Microsoft iNVDIMM device driver; C:\WINDOWS\System32\drivers\invdimm.sys [2017-09-29 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2017-09-29 26112]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-09-29 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-09-29 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-09-29 55840]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-09-29 132608]
S3 netvsc;netvsc; C:\WINDOWS\System32\drivers\netvsc.sys [2017-12-07 192512]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-09-29 88576]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-11-16 30144]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-09-29 100352]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2017-09-29 16896]
S3 ReFS;ReFS; C:\WINDOWS\system32\drivers\ReFS.sys [2017-09-29 1849752]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2017-09-29 103936]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-09-29 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-09-30 56216]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2016-09-05 165504]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2017-12-12 490968]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2017-12-12 490968]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2017-11-06 434248]
R2 CDPUserSvc_609ee;Uživatelská služba platformy připojených zařízení_609ee; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\dusmsvc.dll
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-16 519104]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-12-05 463664]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-11-16 460736]
R2 OneSyncSvc_609ee;Hostitel synchronizace_609ee; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2017-07-01 76152]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-12-07 519152]
R3 PimIndexMaintenanceSvc_609ee;Data kontaktů_609ee; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\System32\TokenBroker.dll
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2017-12-12 1128944]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2017-12-12 1526832]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; %SystemRoot%\system32\svchost.exe -k appmodel -p;"ServiceDll" = %SystemRoot%\system32\CapabilityAccessManager.dll
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\DevicesFlowBroker.dll
S3 DevicesFlowUserSvc_609ee;Tok zařízení_609ee; C:\WINDOWS\system32\svchost.exe -k DevicesFlow;"ServiceDll" =
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k diagnostics;"ServiceDll" = %systemroot%\system32\DiagSvc.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2016-07-21 232208]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-12-07 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup;"ServiceDll" = %SystemRoot%\System32\GraphicsPerfSvc.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\InstallService.dll
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\IpxlatCfg.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_609ee;Služba zasílání zpráv_609ee; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\System32\NaturalAuth.dll
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-16 519104]
S3 Origin Client Service;Origin Client Service; D:\Programy\Origin\OriginClientService.exe [2017-11-16 2123104]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; %SystemRoot%\system32\svchost.exe -k PrintWorkflow;"ServiceDll" = %SystemRoot%\System32\PrintWorkflowService.dll
S3 PrintWorkflowUserSvc_609ee;PrintWorkflow_609ee; C:\WINDOWS\system32\svchost.exe -k PrintWorkflow;"ServiceDll" =
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\PushToInstall.dll
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\system32\SEMgrSvc.dll
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\SharedRealitySvc.dll
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-12-07 956416]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-10-14 1641248]
S4 Origin Web Helper Service;Origin Web Helper Service; D:\Programy\Origin\OriginWebHelperService.exe [2017-11-16 3002728]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner 7.0.5.0 - Logfile created on Thu Dec 14 09:29:28 2017
# Updated on 2017/29/11 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Program Files (x86)\DriverToolkit
Deleted: C:\Users\denny\AppData\Local\DriverToolkit


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKU\S-1-5-21-3947013919-736150964-4177258884-1001\Software\DriverToolkit
Deleted: [Key] - HKCU\Software\DriverToolkit
Deleted: [Key] - HKLM\SOFTWARE\Classes\Applications\WinThrusterSetup.exe
Deleted: [Key] - HKLM\SOFTWARE\Classes\Applications\Setup_WinThruster_2016.exe
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinThruster


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [3504 B] - [2015/1/31 12:18:43]
C:/AdwCleaner/AdwCleaner[S1].txt - [1515 B] - [2017/12/14 9:29:3]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

Dávám log z FRST

ČÁST 1.


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-12-2017
Ran by denny (administrator) on PC (17-12-2017 06:01:18)
Running from C:\Users\denny\Desktop
Loaded Profiles: denny (Available Profiles: denny & Vlastička Petrová)
Platform: Windows 10 Home Version 1709 16299.125 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\System32\PnkBstrA.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(BitTorrent, Inc.) C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\internet explorer\iexplore.exe
(forum.viry.cz) C:\Users\denny\FRSTLauncher.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-3947013919-736150964-4177258884-1001\...\Run: [uTorrent] => C:\Users\denny\AppData\Roaming\uTorrent\utorrent.exe [416168 2015-02-22] (BitTorrent, Inc.)
Startup: C:\Users\Vlastička Petrová\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2017-07-10]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{e49f9fd0-1f4f-46f6-8404-d5add9250565}: [DhcpNameServer] 62.129.50.20 85.135.32.100

Internet Explorer:
==================
HKU\S-1-5-21-3947013919-736150964-4177258884-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://egate.proficredit.cz/marketing/K5/index.php#
SearchScopes: HKU\S-1-5-21-3947013919-736150964-4177258884-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-12-14] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-12-14] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\denny\AppData\Roaming\Mozilla\Firefox\Profiles\2rdkgNWK.default [2016-03-23]
FF Extension: (Avira Browser Safety) - C:\Users\denny\AppData\Roaming\Mozilla\Firefox\Profiles\2rdkgNWK.default\Extensions\abs@avira.com.xpi [2016-03-23] [Legacy]
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-12-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-12-14] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Profile: C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default [2017-12-17]
CHR Extension: (Prezentace) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Dokumenty) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Disk Google) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-23]
CHR Extension: (Seznam pro Chrome - Email) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2017-11-29]
CHR Extension: (YouTube) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-23]
CHR Extension: (Adblock Plus) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-27]
CHR Extension: (Adobe Acrobat) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-09]
CHR Extension: (Tabulky) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Avira Browser Safety) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-06-08]
CHR Extension: (Trevx - Music Downloader) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmaepaboafhefdejcbiciklgjogoghf [2016-05-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Gmail) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-23]
CHR Extension: (Chrome Media Router) - C:\Users\denny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1128944 2017-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [490968 2017-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [490968 2017-12-12] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1526832 2017-12-12] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [434248 2017-11-06] (Avira Operations GmbH & Co. KG)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [232208 2016-07-21] (EasyAntiCheat Ltd)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463664 2017-12-05] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460736 2017-11-16] (NVIDIA Corporation)
S3 Origin Client Service; D:\Programy\Origin\OriginClientService.exe [2123104 2017-11-16] (Electronic Arts)
S4 Origin Web Helper Service; D:\Programy\Origin\OriginWebHelperService.exe [3002728 2017-11-16] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2017-07-01] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2017-06-29] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [60920 2017-06-14] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [178840 2017-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [169376 2017-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c68c1eb90f6d242e\nvlddmkm.sys [17025992 2017-12-06] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-11-28] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-17 06:01 - 2017-12-17 06:01 - 000014003 _____ C:\Users\denny\Desktop\FRST.txt
2017-12-17 06:01 - 2017-12-17 06:01 - 000000000 ____D C:\FRST
2017-12-17 06:00 - 2017-12-17 06:00 - 000112640 _____ (forum.viry.cz) C:\Users\denny\FRSTLauncher.exe
2017-12-17 06:00 - 2017-12-17 06:00 - 000001153 _____ C:\Users\denny\Desktop\FRSTLauncher – zástupce.lnk
2017-12-17 05:55 - 2017-12-17 05:55 - 002392576 _____ (Farbar) C:\Users\denny\Desktop\FRST64.exe
2017-12-14 18:19 - 2017-12-14 18:19 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-12-14 18:19 - 2017-12-14 18:19 - 000000000 ____D C:\Users\denny\AppData\Roaming\Sun
2017-12-14 18:19 - 2017-12-14 18:19 - 000000000 ____D C:\Users\denny\AppData\LocalLow\Sun
2017-12-14 18:19 - 2017-12-14 18:19 - 000000000 ____D C:\ProgramData\Oracle
2017-12-14 18:19 - 2017-12-14 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-12-14 18:18 - 2017-12-14 18:18 - 000000000 ____D C:\Program Files (x86)\Java
2017-12-14 17:52 - 2017-12-05 22:17 - 000532976 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-12-14 17:52 - 2017-12-05 22:17 - 000438584 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-12-14 17:52 - 2017-12-05 20:36 - 000137200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-12-14 17:51 - 2017-12-05 22:17 - 040238576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 036348400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 035156368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 029379568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 023267096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 019040512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 013867840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 013255032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 011782096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 010883744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 004202808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 003615032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001989944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438859.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001674736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438859.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001615472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001321264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001135464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001102368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001038496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 001032688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000982888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000932424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000885496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000794576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000741224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000634224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000616240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000599536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000506680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-12-14 17:51 - 2017-12-05 22:17 - 000225208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-12-14 17:51 - 2017-12-05 22:17 - 000045496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-12-14 17:40 - 2017-12-05 20:56 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-12-14 17:40 - 2017-12-05 20:32 - 005966696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 002589168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 001766288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 000607304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 000450352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 000122768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-12-14 17:40 - 2017-12-05 20:32 - 000082744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-12-14 17:40 - 2017-11-25 13:40 - 007874971 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-12-14 10:27 - 2017-12-14 10:27 - 008187336 _____ (Malwarebytes) C:\Users\denny\Desktop\adwcleaner_7.0.5.0.exe
2017-12-13 18:25 - 2017-12-13 18:25 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2017-12-13 18:25 - 2017-12-13 18:25 - 000000000 ____D C:\Program Files (x86)\GPU-Z
2017-12-13 18:24 - 2017-12-13 18:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2017-12-13 18:24 - 2017-12-13 18:24 - 000000000 ____D C:\Program Files (x86)\Geeks3D
2017-12-13 18:23 - 2017-12-13 18:24 - 008190545 _____ (Geeks3D ) C:\Users\denny\Desktop\FurMark_1.19.1.0_Setup.exe
2017-12-13 18:05 - 2017-12-13 18:05 - 000000000 ____D C:\rsit
2017-12-13 18:05 - 2017-12-13 18:05 - 000000000 ____D C:\Program Files\trend micro
2017-12-13 18:04 - 2017-12-13 18:04 - 001329152 _____ C:\Users\denny\Desktop\RSITx64.exe
2017-12-13 12:22 - 2017-12-08 07:52 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-13 12:22 - 2017-12-08 00:34 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-13 12:22 - 2017-12-08 00:34 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-13 12:22 - 2017-12-08 00:34 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-13 12:22 - 2017-12-08 00:31 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-13 12:22 - 2017-12-08 00:31 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-13 12:22 - 2017-12-08 00:30 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-13 12:22 - 2017-12-08 00:28 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-13 12:22 - 2017-12-08 00:28 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-13 12:22 - 2017-12-08 00:27 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-13 12:22 - 2017-12-08 00:27 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-13 12:22 - 2017-12-08 00:27 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-13 12:22 - 2017-12-08 00:26 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-13 12:22 - 2017-12-08 00:26 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-13 12:22 - 2017-12-08 00:26 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-13 12:22 - 2017-12-08 00:25 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-13 12:22 - 2017-12-08 00:24 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-13 12:22 - 2017-12-08 00:24 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-13 12:22 - 2017-12-08 00:24 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-13 12:22 - 2017-12-08 00:23 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-13 12:22 - 2017-12-08 00:23 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-13 12:22 - 2017-12-08 00:22 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-13 12:22 - 2017-12-08 00:22 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-13 12:22 - 2017-12-08 00:22 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-13 12:22 - 2017-12-08 00:22 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-13 12:22 - 2017-12-08 00:21 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-13 12:22 - 2017-12-08 00:20 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-13 12:22 - 2017-12-08 00:19 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-13 12:22 - 2017-12-08 00:16 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-13 12:22 - 2017-12-08 00:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-13 12:22 - 2017-12-08 00:15 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-13 12:22 - 2017-12-08 00:15 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-13 12:22 - 2017-12-08 00:14 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-13 12:22 - 2017-12-08 00:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-13 12:22 - 2017-12-08 00:10 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-13 12:22 - 2017-12-07 23:58 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-12-13 12:22 - 2017-12-07 23:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-12-13 12:22 - 2017-12-07 23:56 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-12-13 12:22 - 2017-12-07 23:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-12-13 12:22 - 2017-12-07 23:55 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-12-13 12:22 - 2017-12-07 23:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-12-13 12:22 - 2017-12-07 23:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-12-13 12:22 - 2017-12-07 23:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2017-12-13 12:22 - 2017-12-07 23:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-12-13 12:22 - 2017-12-07 23:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-12-13 12:22 - 2017-12-07 23:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-12-13 12:22 - 2017-12-07 23:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2017-12-13 12:22 - 2017-12-07 23:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-12-13 12:22 - 2017-12-07 23:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-12-13 12:22 - 2017-12-07 23:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-12-13 12:22 - 2017-12-07 23:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-12-13 12:22 - 2017-12-07 23:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-13 12:22 - 2017-12-07 23:22 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-13 12:22 - 2017-12-07 23:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-12-13 12:22 - 2017-12-07 23:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2017-12-13 12:22 - 2017-12-07 23:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2017-12-13 12:22 - 2017-12-07 23:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-12-13 12:22 - 2017-12-07 23:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2017-12-13 12:22 - 2017-12-07 23:11 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-13 12:22 - 2017-12-07 23:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-12-13 12:22 - 2017-12-07 23:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-12-13 12:22 - 2017-12-07 23:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2017-12-13 12:22 - 2017-12-07 23:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-12-13 12:22 - 2017-12-07 23:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2017-12-13 12:22 - 2017-12-07 23:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2017-12-13 12:22 - 2017-12-07 23:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2017-12-13 12:22 - 2017-12-07 23:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-13 12:22 - 2017-12-07 23:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-12-13 12:22 - 2017-12-07 23:07 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-13 12:22 - 2017-12-07 23:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 12:22 - 2017-12-07 23:07 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-13 12:22 - 2017-12-07 23:07 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-13 12:22 - 2017-12-07 23:07 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-13 12:22 - 2017-12-07 23:07 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-13 12:22 - 2017-12-07 23:06 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-13 12:22 - 2017-12-07 23:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-12-13 12:22 - 2017-12-07 23:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-12-13 12:22 - 2017-12-07 23:06 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-13 12:22 - 2017-12-07 23:06 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-13 12:22 - 2017-12-07 23:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-13 12:22 - 2017-12-07 23:05 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-13 12:22 - 2017-12-07 23:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-12-13 12:22 - 2017-12-07 23:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-12-13 12:22 - 2017-12-07 23:04 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-13 12:22 - 2017-12-07 23:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-12-13 12:22 - 2017-12-07 23:04 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-13 12:22 - 2017-12-07 23:03 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-13 12:22 - 2017-12-07 23:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-13 12:22 - 2017-12-07 23:01 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-13 12:22 - 2017-12-07 23:01 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-13 12:22 - 2017-12-07 23:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-12-13 12:22 - 2017-12-07 23:01 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-13 12:22 - 2017-12-07 23:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-13 12:22 - 2017-12-07 23:00 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-13 12:22 - 2017-12-07 23:00 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-13 12:22 - 2017-12-07 23:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-12-13 12:22 - 2017-12-07 22:59 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-13 12:22 - 2017-12-07 22:59 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-13 12:22 - 2017-12-07 22:59 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-13 12:22 - 2017-12-07 22:59 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-13 12:22 - 2017-12-07 22:59 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-13 12:22 - 2017-12-07 22:58 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-13 12:22 - 2017-12-07 22:58 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-13 12:22 - 2017-12-07 22:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-13 12:22 - 2017-12-07 22:58 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-13 12:22 - 2017-12-07 22:58 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-13 12:22 - 2017-12-07 22:57 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-13 12:22 - 2017-12-07 22:57 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-13 12:22 - 2017-12-07 22:56 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-13 12:22 - 2017-12-07 22:56 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-13 12:22 - 2017-12-07 22:56 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-13 12:22 - 2017-12-07 22:54 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-13 12:22 - 2017-12-07 22:54 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-13 12:22 - 2017-12-07 22:54 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-11 21:42 - 2017-12-11 21:42 - 000018754 _____ C:\Users\denny\Desktop\[CzT]To_It_2017_WebRip_720pLQ_.torrent
2017-12-08 17:10 - 2017-12-08 17:10 - 000000020 ___SH C:\Users\Vlastička Petrová\ntuser.ini
2017-12-08 17:10 - 2017-12-08 17:10 - 000000000 ___RD C:\Users\Vlastička Petrová\3D Objects
2017-12-08 17:10 - 2017-12-08 17:10 - 000000000 ___HD C:\Users\Vlastička Petrová\MicrosoftEdgeBackups
2017-12-07 18:07 - 2017-12-14 17:51 - 001888390 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-07 18:07 - 2017-12-07 18:07 - 000000000 ____D C:\ProgramData\USOShared
2017-12-07 18:05 - 2017-12-07 18:05 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-07 18:04 - 2017-12-07 18:04 - 000000000 ___HD C:\Users\denny\MicrosoftEdgeBackups
2017-12-07 18:03 - 2017-12-13 17:34 - 000000000 ___RD C:\Users\denny\3D Objects
2017-12-07 18:03 - 2017-12-07 18:03 - 000000020 ___SH C:\Users\denny\ntuser.ini
2017-12-07 18:02 - 2017-12-14 17:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-07 18:02 - 2017-12-08 17:11 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3947013919-736150964-4177258884-1004
2017-12-07 18:02 - 2017-12-07 18:11 - 000003374 _____ C:\WINDOWS\System32\Tasks\Avira_Antivirus_Systray
2017-12-07 18:02 - 2017-12-07 18:06 - 000003350 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3947013919-736150964-4177258884-1001
2017-12-07 18:02 - 2017-12-07 18:02 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-12-07 18:02 - 2017-12-07 18:02 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-12-07 18:02 - 2017-12-07 18:02 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-12-07 18:02 - 2017-12-07 18:02 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-07 18:02 - 2017-12-07 18:02 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-07 18:02 - 2017-12-07 18:02 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002830 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2017-12-07 18:02 - 2017-12-07 18:02 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-07 18:02 - 2017-12-07 18:02 - 000002362 _____ C:\WINDOWS\System32\Tasks\Avira SystrayStartTrigger
2017-12-07 18:02 - 2017-12-07 18:02 - 000002236 _____ C:\WINDOWS\System32\Tasks\{BC1A2B87-9BF6-4CCF-9D8E-235AB2C80CDE}
2017-12-07 17:59 - 2017-12-07 17:59 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-07 17:59 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-12-07 17:58 - 2017-12-17 06:00 - 000000000 ____D C:\Users\denny
2017-12-07 17:58 - 2017-12-08 19:52 - 000000000 ____D C:\Users\denny\AppData\Local\Packages
2017-12-07 17:58 - 2017-12-08 17:26 - 000000000 ____D C:\Users\Vlastička Petrová\AppData\Local\Packages
2017-12-07 17:58 - 2017-12-08 17:10 - 000000000 ____D C:\Users\Vlastička Petrová
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Šablony
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Soubory cookie
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Poslední
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Okolní tiskárny
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Okolní síť
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Nabídka Start
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Dokumenty
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Documents\Obrázky
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Documents\Hudba
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Documents\Filmy
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\Data aplikací
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\Vlastička Petrová\AppData\Local\Data aplikací
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Šablony
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Soubory cookie
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Poslední
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Okolní tiskárny
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Okolní síť
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Nabídka Start
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Dokumenty
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Documents\Obrázky
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Documents\Hudba
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Documents\Filmy
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\Data aplikací
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-07 17:58 - 2017-12-07 17:58 - 000000000 _SHDL C:\Users\denny\AppData\Local\Data aplikací
2017-12-07 17:57 - 2017-12-14 16:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-07 17:57 - 2017-12-13 17:33 - 000257360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-07 17:55 - 2017-12-07 18:03 - 000000000 ____D C:\Windows.old
2017-12-07 09:43 - 2017-12-12 13:36 - 000178840 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2017-12-07 09:43 - 2017-12-12 13:36 - 000169376 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2017-12-07 09:43 - 2017-06-14 15:50 - 000060920 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avdevprot.sys
2017-12-07 09:43 - 2017-06-14 15:50 - 000038048 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2017-12-07 09:43 - 2017-03-03 00:07 - 000088488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2017-12-07 09:43 - 2017-03-03 00:07 - 000044488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2017-12-07 09:42 - 2017-12-07 17:55 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-07 09:39 - 2017-12-07 09:42 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-07 09:36 - 2017-12-07 09:36 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-12-07 09:36 - 2017-12-07 09:36 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-07 09:36 - 2017-12-07 09:36 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-07 09:35 - 2017-12-07 09:35 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-12-07 09:35 - 2017-12-07 09:35 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-12-07 09:35 - 2017-12-07 09:35 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-12-07 09:35 - 2017-12-07 09:35 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-12-07 09:35 - 2017-12-07 09:35 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-07 09:35 - 2017-12-07 09:35 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-12-07 09:24 - 2017-12-07 09:24 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-12-07 09:24 - 2017-12-07 09:24 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-12-07 09:24 - 2017-12-07 09:24 - 000000000 ____D C:\Program Files\MSBuild
2017-12-07 09:24 - 2017-12-07 09:24 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-12-07 09:24 - 2017-12-07 09:24 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-12-07 09:23 - 2017-12-07 09:23 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-07 09:23 - 2017-12-07 09:23 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-12-07 09:23 - 2017-12-07 09:23 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-07 09:23 - 2017-12-07 09:23 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-12-07 09:23 - 2017-12-07 09:23 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-12-07 09:23 - 2017-12-07 09:23 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-07 09:14 - 2017-12-07 09:14 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-07 08:33 - 2017-12-08 17:07 - 000000000 ___DC C:\WINDOWS\Panther
2017-11-30 17:50 - 2017-11-30 17:50 - 000014452 _____ C:\Users\denny\Desktop\[CzT]Muj_salek_kavy_Coffee_Shop_2014_CZ_.torrent
2017-11-30 17:36 - 2017-11-28 02:56 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-11-30 16:46 - 2017-12-05 22:17 - 004485560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-11-30 16:46 - 2017-12-05 22:17 - 003817400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-11-30 16:46 - 2017-12-05 22:17 - 000048442 _____ C:\WINDOWS\system32\nvinfo.pb
2017-11-30 16:46 - 2017-11-28 02:56 - 004485560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SET4972.tmp
2017-11-30 16:46 - 2017-11-28 02:56 - 003817584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET5365.tmp
2017-11-30 16:46 - 2017-11-28 02:56 - 001991016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438843.dll
2017-11-30 16:46 - 2017-11-28 02:56 - 001674552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438843.dll
2017-11-30 16:46 - 2017-11-28 02:56 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2017-11-30 16:46 - 2017-11-28 02:56 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json
2017-11-18 10:25 - 2017-11-18 10:25 - 000000645 _____ C:\Users\Public\Desktop\Call of Duty WWII.lnk
2017-11-18 10:25 - 2017-11-18 10:25 - 000000645 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty WWII.lnk
2017-11-17 15:20 - 2017-11-17 15:20 - 000000000 ____D C:\Users\denny\Desktop\mp3
2017-11-17 15:20 - 2017-11-17 15:20 - 000000000 ____D C:\Users\denny\Desktop\Davča
2017-11-17 15:19 - 2017-11-17 15:20 - 000000000 ____D C:\Users\denny\Desktop\Učivo
2017-11-17 15:16 - 2017-11-17 15:16 - 000016252 _____ C:\Users\denny\Desktop\[CzT]Odvracena_strana_mesice_Die_dunkle_Seite_des_Mondes_2015_CZ_.torrent
2017-11-17 15:16 - 2017-11-17 15:16 - 000014151 _____ C:\Users\denny\Desktop\[CzT]Ja_Kajinek_E01_Zpoved_CZ_WebRip_1080p_.torrent
2017-11-17 15:13 - 2017-11-17 15:13 - 000023011 _____ C:\Users\denny\Desktop\[CzT]Amityville_Probuzeni_Amityville_The_Awakening_2017_720pHD_.torrent

==================== One Month Modified files and folders ========

ČÁST 2.

ČÁST 2.

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-17 06:01 - 2016-03-23 16:37 - 000000000 ____D C:\Users\denny\AppData\Roaming\uTorrent
2017-12-17 05:57 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-17 05:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-17 05:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-17 05:56 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-17 05:56 - 2017-05-20 14:42 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-14 18:21 - 2016-03-23 16:35 - 000000000 ____D C:\Users\denny\AppData\Local\NVIDIA
2017-12-14 17:52 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-12-14 17:52 - 2017-05-20 14:42 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-12-14 17:52 - 2017-05-20 14:41 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-14 17:52 - 2016-03-23 17:13 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-12-14 17:52 - 2016-03-23 16:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-12-14 17:52 - 2015-05-19 12:29 - 000000000 ____D C:\Temp
2017-12-14 17:51 - 2017-09-30 15:31 - 000808206 _____ C:\WINDOWS\system32\perfh005.dat
2017-12-14 17:51 - 2017-09-30 15:31 - 000168034 _____ C:\WINDOWS\system32\perfc005.dat
2017-12-14 17:44 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-12-14 17:40 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2017-12-14 17:40 - 2017-05-20 14:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-12-14 11:00 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-12-14 10:29 - 2015-01-31 13:17 - 000000000 ____D C:\AdwCleaner
2017-12-13 17:34 - 2016-02-13 14:12 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-13 17:32 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-13 17:32 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-12-13 17:32 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-13 17:32 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-13 17:32 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-13 14:22 - 2017-05-16 18:35 - 000000000 ____D C:\Users\denny\AppData\Roaming\vlc
2017-12-13 14:19 - 2016-03-23 18:27 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2017-12-13 14:18 - 2016-03-23 18:27 - 000000000 ____D C:\Program Files\Rockstar Games
2017-12-13 12:24 - 2016-03-23 20:36 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-13 12:23 - 2017-10-11 14:59 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-13 12:23 - 2016-03-23 20:36 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 13:37 - 2016-03-23 16:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-12-09 12:54 - 2016-03-23 16:39 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-08 17:11 - 2017-05-02 19:04 - 000002423 _____ C:\Users\Vlastička Petrová\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-08 17:11 - 2017-05-02 19:04 - 000000000 ___RD C:\Users\Vlastička Petrová\OneDrive
2017-12-08 17:10 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-08 17:10 - 2017-05-02 19:03 - 000002332 _____ C:\Users\Vlastička Petrová\Desktop\Google Chrome.lnk
2017-12-08 17:10 - 2017-05-02 19:03 - 000000000 ____D C:\Users\Vlastička Petrová\AppData\Local\TileDataLayer
2017-12-07 18:07 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-07 18:06 - 2016-03-23 16:33 - 000002387 _____ C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-07 18:06 - 2016-03-23 16:33 - 000000000 ___RD C:\Users\denny\OneDrive
2017-12-07 18:03 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2017-12-07 18:03 - 2016-03-23 16:31 - 000000000 ____D C:\Users\denny\AppData\Local\TileDataLayer
2017-12-07 18:02 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2017-12-07 18:01 - 2016-08-04 09:01 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-07 18:00 - 2017-05-16 17:37 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2017-12-07 18:00 - 2017-05-04 12:52 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.CZ
2017-12-07 18:00 - 2017-03-27 19:11 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2017-12-07 18:00 - 2016-06-16 20:43 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-07 18:00 - 2016-03-24 19:55 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-07 18:00 - 2016-03-23 16:37 - 000000000 ____D C:\Users\denny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2017-12-07 17:59 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-07 17:58 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-07 17:57 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-07 17:55 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2017-12-07 17:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-07 17:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-07 17:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-07 17:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-12-07 17:55 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-07 17:55 - 2017-08-29 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Fishing Foundry Dock
2017-12-07 17:55 - 2017-05-16 18:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-12-07 17:55 - 2017-05-03 15:31 - 000000000 ____D C:\Program Files\UNP
2017-12-07 17:55 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-07 17:55 - 2017-01-30 18:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resident Evil 7 Biohazard
2017-12-07 17:55 - 2016-10-13 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-12-07 17:55 - 2016-06-15 17:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-12-07 17:55 - 2016-06-15 12:37 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.2
2017-12-07 17:55 - 2016-05-09 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2017-12-07 17:55 - 2016-04-21 15:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Fishing
2017-12-07 17:55 - 2016-04-20 18:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-07 17:55 - 2016-03-24 20:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-12-07 17:55 - 2016-03-24 20:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2017-12-07 17:55 - 2016-03-24 19:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-07 17:55 - 2016-03-24 10:26 - 000000000 ____D C:\Program Files\Intel
2017-12-07 09:45 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-07 09:42 - 2016-03-23 18:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-12-07 09:42 - 2016-03-23 17:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan 1.0.3.0
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-12-07 09:37 - 2017-09-30 15:32 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-07 09:37 - 2017-09-29 14:46 - 000000000 ____D C:\PerfLogs
2017-12-07 09:24 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-12-07 09:24 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-12-03 23:38 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-12-03 23:38 - 2017-09-29 14:49 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-30 16:44 - 2017-02-01 15:56 - 000001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-11-30 11:49 - 2016-03-24 10:17 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 10:41 - 2016-03-23 16:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-18 10:24 - 2016-03-24 09:55 - 000000000 ____D C:\Users\denny\AppData\Local\CrashDumps

==================== Files in the root of some directories =======

2017-12-17 06:00 - 2017-12-17 06:00 - 000112640 _____ (forum.viry.cz) C:\Users\denny\FRSTLauncher.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-12-07 17:57

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.15 GB) (Free:46.92 GB) NTFS
Drive d: () (Fixed) (Total:1863.01 GB) (Free:532.57 GB) NTFS

Available physical RAM: 13239.86 MB
Total physical RAM: 16326.65 MB
Percentage of memory in use: 18%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: B2B6CE9F)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: B2B6CE97)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]

==================== Security Center ==================

AV: Avira Antivirus (Disabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Disabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\denny\Desktop" je 113 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
SearchScopes: HKU\S-1-5-21-3947013919-736150964-4177258884-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17-12-2017
Ran by denny (17-12-2017 12:59:46) Run:1
Running from C:\Users\denny\Desktop
Loaded Profiles: denny (Available Profiles: denny & Vlastička Petrová)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\denny\Documents\prac.smlouva2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
SearchScopes: HKU\S-1-5-21-3947013919-736150964-4177258884-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End
*****************

C:\Users\denny\Documents\prac.smlouva1.jpeg => ":3or4kl4x13tuuug3Byamue2s4b" ADS removed successfully
C:\Users\denny\Documents\prac.smlouva1.jpeg => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS removed successfully
C:\Users\denny\Documents\prac.smlouva2.jpeg => ":3or4kl4x13tuuug3Byamue2s4b" ADS removed successfully
C:\Users\denny\Documents\prac.smlouva2.jpeg => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-3947013919-736150964-4177258884-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19111416 B
Java, Flash, Steam htmlcache => 42068206 B
Windows/system/drivers => -259293180 B
Edge => 2014690 B
Chrome => 691723935 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 12242 B
NetworkService => 0 B
denny => 93871048 B
Vlastička Petrová => 26203875 B

RecycleBin => 63675742 B
EmptyTemp: => 655.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 12:59:55 ====

Smazáno. Log by již měl být OK.

Děkuji Rudy, avšak mám dotaz ohledně DirectX, tuším že mám s grafickou kartou velký problém ale nemohu přijít na to, zda se jedná o HW nebo SW problém. Při spuštění jakékoliv hry mi po pár minutách padá s hláškou DirectX ( viz. níže ) Hlášky se občas zaměňují - né vždy se jedná o stejný text chyby. Chci se tímto zeptat zda nevíš o aplikaci která by dokázala identifikovat problém s DirectX popř. zda se jedná o HW nebo SW problém. Děkuji

Z tohoto ani já nepoznám, zda se jedná o problém hw, nebo sw. Doporučuji přeinstalovat ovladač graf. karty. Pokud to nezmizí, vyzkoušejte ji v jiném PC, případně se poptejte na některém herním fóru. My nejsme pařani a toto detailně neznáme.

V tom případě je to ode mně vše. Děkuji za pomoc.

Rádo se stalo!