VIRY.CZ

Dobrý den , prosím o kontrolu .
Projel jsem to Adwcleanerem a ten našel nějakej prvek ale nedaří se jej odstranit při čištění , zamrzne asi někde ve čtvrtině.
prvek má název PUP.Optional.DriverDoc třeba to nic nebezpečného není ale co kdyby děkuji za kontrolu.
Posílám nadvakrát je to moc velké
Logfile of random's system information tool 1.10 (written by random/random)
Run by tlumi at 2018-03-01 08:00:57
Microsoft Windows 10 Pro
System drive C: has 68 GB (26%) free of 261 GB
Total RAM: 16338 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:01:03, on 01.03.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
C:\Program Files (x86)\GIGABYTE\RGBFusion\SelLedV2.exe
C:\Program Files (x86)\GIGABYTE\RGBFusion\GvLedServices.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
C:\Program Files (x86)\Razer\Razer_Kraken71Chroma_Driver\Drivers\SysAudio\Kraken71ChromaHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
C:\Users\tlumi\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
C:\Users\tlumi\Downloads\adwcleaner_7.0.8.0.exe
C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
C:\Program Files\trend micro\tlumi.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 176.9.99.173 mf.svc.nhl.com
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: McAfee WebAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [Sound Blaster X-Fi MB5] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [Kraken71ChromaHelper] C:\Program Files (x86)\Razer\Razer_Kraken71Chroma_Driver\Drivers\SysAudio\Kraken71ChromaHelper.exe /start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [PreRun] C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe
O4 - HKLM\..\RunOnce: [SelLed] C:\Program Files (x86)\GIGABYTE\RGBFusion\RunLed.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\tlumi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe -overwolfsilent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Discord] C:\Users\tlumi\AppData\Local\Discord\app-0.0.300\Discord.exe
O4 - HKCU\..\Run: [World of Warplanes] "D:\Games\World_of_Warplanes\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [World of Warships] "D:\Games\World_of_Warships\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BlueStacks Agent] C:\Program Files (x86)\Bluestacks\HD-Agent.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: Killer Control Center.lnk = C:\Program Files\Killer Networking\Killer Control Center\KillerControlCenter.exe
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Developer Tools Service (DeveloperToolsService) - Unknown owner - C:\WINDOWS\System32\DeveloperToolsSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: EasyTune Engine (EasyTuneEngineService) - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GIGABYTE Adjust (gadjservice) - Unknown owner - C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Heroes & Generals Steam Service (HnGSteamService) - Reto-Moto ApS - D:\Program Files (x86)\SteamLibrary\steamapps\common\Heroes & Generals\hngservice.exe
O23 - Service: Hardware Monitor Record service (HwmRecordService) - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) TPM Provisioning Service - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Killer Network Service (Killer Network Service x64) - Rivet Networks - C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: OcButtonService - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
O23 - Service: Razer Chroma SDK Server - Razer Inc. - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
O23 - Service: Razer Chroma SDK Service - Razer Inc. - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 15537 bytes

======Listing Processes======








c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservice -p -s SEMgrSvc

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\svchost.exe -k imgsvc

c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe"
"C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\GIGABYTE\Smart TimeLock\AlarmClock.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe" -userServiceMode
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe"
"C:\Program Files (x86)\GIGABYTE\RGBFusion\SelLedV2.exe" -fromweb
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1807.264.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"ctfmon.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe"
"C:\Program Files (x86)\GIGABYTE\RGBFusion\GvLedServices.exe"
AvastUI.exe /nogui
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe" /r
"C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
"C:\Program Files (x86)\Razer\Razer_Kraken71Chroma_Driver\Drivers\SysAudio\Kraken71ChromaHelper.exe" /start
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe" -sync_complete
"C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe"
"C:\Users\tlumi\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe" --type=gpu-process --channel="7284.0.181024582\1519684195" --no-sandbox --lang=en-US --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x11c0 --gpu-driver-vendor=NVIDIA --gpu-driver-version=23.21.13.9065 --lang=en-US /prefetch:822062411
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11801.1001.6.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.13110.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Users\tlumi\Downloads\adwcleaner_7.0.8.0.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="9056.0.572024856\376755170" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\tlumi\AppData\LocalLow\Mozilla\Temp-{c9715264-1374-40c8-974b-23c2c78efd07}" 9056 "\\.\pipe\gecko-crash-server-pipe.9056" gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="9056.3.1302321514\1439413009" -childID 1 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|99:2|100:1|115:5000|125:0|127:0|138:10000|150:-1|158:24|159:32768|161:0|162:0|170:5|174:1048576|175:100|176:5000|178:600|180:1|188:20|191:4|195:0|204:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:0|85:0|86:0|88:0|89:0|90:1|91:1|92:1|95:1|96:0|98:0|101:1|102:0|109:0|114:0|117:1|120:1|122:1|126:0|129:1|132:1|133:1|139:1|140:0|141:1|143:0|149:0|151:1|152:0|153:1|156:0|157:0|160:1|163:0|165:1|167:1|168:0|177:1|182:0|183:0|184:0|185:1|186:0|187:0|189:1|190:1|193:0|196:0|197:0|198:1|199:1|200:0|201:1|202:1|203:1|205:0|206:0|208:0|217:1|218:1|219:0|220:0|221:0| -stringPrefs "3:7;release|97:0;|142:3;1.0|154:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|155:4;high|192:38;{c9715264-1374-40c8-974b-23c2c78efd07}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 9056 "\\.\pipe\gecko-crash-server-pipe.9056" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="9056.13.421220067\1552540340" -childID 2 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|99:2|100:1|115:5000|125:0|127:0|138:10000|150:-1|158:24|159:32768|161:0|162:0|170:5|174:1048576|175:100|176:5000|178:600|180:1|188:20|191:4|195:0|204:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:0|85:0|86:0|88:0|89:0|90:1|91:1|92:1|95:1|96:0|98:0|101:1|102:0|109:0|114:0|117:1|120:1|122:1|126:0|129:1|132:1|133:1|139:1|140:0|141:1|143:0|149:0|151:1|152:0|153:1|156:0|157:0|160:1|163:0|165:1|167:1|168:0|177:1|182:0|183:0|184:0|185:1|186:0|187:0|189:1|190:1|193:0|196:0|197:0|198:1|199:1|200:0|201:1|202:1|203:1|205:0|206:0|208:0|217:1|218:1|219:0|220:0|221:0| -stringPrefs "3:7;release|97:0;|142:3;1.0|154:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|155:4;high|192:38;{c9715264-1374-40c8-974b-23c2c78efd07}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 9056 "\\.\pipe\gecko-crash-server-pipe.9056" tab
"C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe" "C:\Program Files (x86)\McAfee\SiteAdvisor\siteadvisor.mcafee.firefox.extension.json" {4ED1F68A-5463-4931-9384-8FFF5ED91D92}
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\AUDIODG.EXE 0x730
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="9056.34.165954248\340942534" -childID 5 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|99:2|100:1|115:5000|125:0|127:0|138:10000|150:-1|158:24|159:32768|161:0|162:0|170:5|174:1048576|175:100|176:5000|178:600|180:1|188:20|191:4|195:0|204:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:0|85:0|86:0|88:0|89:0|90:1|91:1|92:1|95:1|96:0|98:0|101:1|102:0|109:0|114:0|117:1|120:1|122:1|126:0|129:1|132:1|133:1|139:1|140:0|141:1|143:0|149:0|151:1|152:0|153:1|156:0|157:0|160:1|163:0|165:1|167:1|168:0|177:1|182:0|183:0|184:0|185:1|186:0|187:0|189:1|190:1|193:0|196:0|197:0|198:1|199:1|200:0|201:1|202:1|203:1|205:0|206:0|208:0|217:1|218:1|219:0|220:0|221:0| -stringPrefs "3:7;release|97:0;|142:3;1.0|154:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|155:4;high|192:38;{c9715264-1374-40c8-974b-23c2c78efd07}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 9056 "\\.\pipe\gecko-crash-server-pipe.9056" tab
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 728 732 740 8192 736
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
"C:\Users\tlumi\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Chromium dofem.job - C:\Windows\system32\wscript.exe "C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}\loro.txt" "68747470733a2f2f6b6174756e61712e636f6d" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d423333332d3645353032393731453539457d5c63696e656465" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d423333332d3645353032393731453539457d5c63656d6f6c6164" "//B" "//E:jscript" "--IsErIk"

=========Mozilla firefox=========

ProfilePath - C:\Users\tlumi\AppData\Roaming\Mozilla\Firefox\Profiles\ia3iyp9g.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 28.0.0.161 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon My Image Garden
"Path"=C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.161.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.161.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 28.0.0.161 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll

druhá část

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23 217784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
GBHO.BHO - C:\Windows\system32\mscoree.dll [2017-09-29 372736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-07-15 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2018-01-19 199648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23 184488]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-02-01 474688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-07-15 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2018-01-19 167480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-02-01 188992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1d09c093-f71e-43c3-b948-19316cbd695e} - Smart Backup - C:\Windows\system32\mscoree.dll [2017-09-29 372736]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-07-15 255088]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23 6149288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-07-15 193136]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23 4452504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-02-13 243496]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2014-08-14 570152]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2014-02-21 41088]
"iTunesHelper"=D:\Program Files\iTunes\iTunesHelper.exe [2017-12-11 297272]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2017-11-08 9235936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\tlumi\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-01-31 1554080]
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-01-05 3139872]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2017-12-15 3111712]
"Overwolf"=C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2017-09-10 1052488]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2017-11-02 3098952]
"Discord"=C:\Users\tlumi\AppData\Local\Discord\app-0.0.300\Discord.exe [2018-01-08 57821176]
"World of Warplanes"=D:\Games\World_of_Warplanes\WargamingGameUpdater.exe [2017-06-06 3136264]
"World of Warships"=D:\Games\World_of_Warships\WargamingGameUpdater.exe [2017-09-19 3136264]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-02-07 10290608]
"BlueStacks Agent"=C:\Program Files (x86)\Bluestacks\HD-Agent.exe [2017-10-06 160824]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2015-07-23 5319632]
"AcronisTibMounterMonitor"=C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2015-07-19 691056]
"Sound Blaster X-Fi MB5"=C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe [2016-09-23 871936]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2018-01-15 596664]
"Kraken71ChromaHelper"=C:\Program Files (x86)\Razer\Razer_Kraken71Chroma_Driver\Drivers\SysAudio\Kraken71ChromaHelper.exe [2017-02-14 1600096]
""= []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-12-19 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"PreRun"=C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe [2016-02-26 14632]
"SelLed"=C:\Program Files (x86)\GIGABYTE\RGBFusion\RunLed.exe [2017-05-25 115120]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Control Center.lnk - C:\Program Files\Killer Networking\Killer Control Center\KillerControlCenter.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux4"=wdmaud.drv
"wave8"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-03-01 08:00:57 ----D---- C:\rsit
2018-03-01 08:00:57 ----D---- C:\Program Files\trend micro
2018-02-21 16:00:51 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2018-02-21 16:00:50 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2018-02-21 16:00:49 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2018-02-21 16:00:49 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2018-02-21 16:00:49 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2018-02-21 16:00:48 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2018-02-21 16:00:48 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2018-02-21 16:00:48 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2018-02-21 16:00:48 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2018-02-21 16:00:47 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_42.dll
2018-02-21 16:00:47 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2018-02-21 16:00:47 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2018-02-21 16:00:47 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2018-02-21 16:00:47 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_42.dll
2018-02-21 16:00:46 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2018-02-21 16:00:46 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2018-02-21 16:00:46 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2018-02-21 16:00:46 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2018-02-21 16:00:46 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2018-02-21 16:00:45 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2018-02-21 16:00:45 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2018-02-21 16:00:45 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2018-02-21 16:00:45 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2018-02-21 16:00:44 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2018-02-21 16:00:44 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2018-02-21 16:00:44 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2018-02-21 16:00:43 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2018-02-21 16:00:43 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2018-02-21 16:00:43 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2018-02-21 16:00:43 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2018-02-21 16:00:42 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2018-02-21 16:00:42 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2018-02-21 16:00:42 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2018-02-21 16:00:42 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2018-02-21 16:00:41 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2018-02-21 16:00:40 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2018-02-21 16:00:40 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2018-02-21 16:00:40 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2018-02-21 16:00:40 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2018-02-21 16:00:39 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2018-02-21 16:00:39 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2018-02-21 16:00:39 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2018-02-21 16:00:38 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2018-02-21 16:00:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2018-02-21 16:00:38 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2018-02-21 16:00:38 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2018-02-21 16:00:37 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2018-02-21 16:00:37 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2018-02-21 16:00:37 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2018-02-21 16:00:36 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2018-02-21 16:00:36 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2018-02-21 16:00:36 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_35.dll
2018-02-21 16:00:36 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2018-02-21 16:00:36 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2018-02-21 16:00:35 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2018-02-21 16:00:35 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2018-02-21 16:00:35 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_34.dll
2018-02-21 16:00:34 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2018-02-21 16:00:34 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2018-02-21 16:00:34 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2018-02-21 16:00:33 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2018-02-21 16:00:33 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2018-02-21 16:00:32 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2018-02-21 16:00:32 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2018-02-21 16:00:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2018-02-21 16:00:31 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2018-02-21 16:00:31 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2018-02-21 16:00:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2018-02-21 16:00:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll
2018-02-21 16:00:30 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2018-02-21 16:00:30 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll
2018-02-21 16:00:29 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll
2018-02-21 16:00:29 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll
2018-02-21 16:00:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_26.dll
2018-02-21 16:00:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_24.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\wpncore.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\WpcMon.exe
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\SRH.dll
2018-02-14 12:22:31 ----A---- C:\WINDOWS\system32\Magnify.exe
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\system32\Wpc.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-02-14 12:22:30 ----A---- C:\WINDOWS\system32\mspaint.exe
2018-02-14 12:22:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-02-14 12:22:29 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2018-02-14 12:22:29 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-02-14 12:22:29 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-02-14 12:22:29 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-02-14 12:22:29 ----A---- C:\WINDOWS\system32\mmc.exe
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.ProxyStub.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\PCShellCommonProxyStub.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2018-02-14 12:22:28 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2018-02-14 12:22:28 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryBroker.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\OneCoreCommonProxyStub.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\sud.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\srchadmin.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\PCShellCommonProxyStub.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-02-14 12:22:27 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2018-02-14 12:22:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-02-14 12:22:25 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\tquery.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\SEMgrSvc.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-02-14 12:22:25 ----A---- C:\WINDOWS\system32\AppLockerCSP.dll
2018-02-14 12:22:24 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-02-14 12:22:24 ----A---- C:\WINDOWS\system32\hal.dll
2018-02-14 12:22:24 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-02-14 12:22:24 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-02-14 12:22:24 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\themecpl.dll
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\rastls.dll
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\mmcbase.dll
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\gameux.dll
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-02-14 12:22:23 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-02-14 12:22:22 ----A---- C:\WINDOWS\system32\dxtrans.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\StateRepository.Core.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\nshhttp.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\netlogon.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\evr.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\DbgModel.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\authz.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-02-14 12:22:21 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\webio.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\VSSVC.exe
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\mssrch.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\InputService.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\drivers\winnat.sys
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2018-02-14 12:22:20 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-02-14 12:22:19 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-02-14 12:22:19 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\mshtmled.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2018-02-14 12:22:18 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2018-02-14 12:22:17 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\dnsapi.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-02-14 12:22:17 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\twinapi.dll
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\ncsi.dll
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-02-14 12:22:16 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\vssapi.dll
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-02-14 12:22:15 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-02-14 12:22:14 ----A---- C:\WINDOWS\system32\wininet.dll
2018-02-14 12:22:14 ----A---- C:\WINDOWS\system32\msIso.dll
2018-02-14 12:22:14 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-02-14 12:22:14 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-02-14 12:22:13 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-02-14 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\nshhttp.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2018-02-14 12:22:12 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\SettingSync.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-02-14 12:22:12 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\wuauclt.exe
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\SettingsHandlers_User.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\nlaapi.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\ISM.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\convertvhd.exe
2018-02-14 12:22:11 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2018-02-14 12:22:10 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2018-02-14 12:22:09 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\winsrv.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\winbrand.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\stobject.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\rstrui.exe
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\mssvp.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\hgcpl.dll
2018-02-14 12:22:09 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2018-02-14 12:22:08 ----A---- C:\WINDOWS\system32\setupapi.dll
2018-02-14 12:22:08 ----A---- C:\WINDOWS\system32\nlasvc.dll
2018-02-14 12:22:08 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-02-14 12:22:08 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\twinui.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\themeui.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\ntshrui.dll
2018-02-14 12:22:07 ----A---- C:\WINDOWS\system32\comdlg32.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\zipfldr.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\wow64.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\lsm.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\LogonController.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\bootux.dll
2018-02-14 12:22:06 ----A---- C:\WINDOWS\system32\aclui.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\srcore.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\shell32.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\localspl.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\ListSvc.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\fontext.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\system32\cscui.dll
2018-02-14 12:22:05 ----A---- C:\WINDOWS\explorer.exe
2018-02-14 12:22:04 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-02-14 12:22:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-02-14 12:22:04 ----A---- C:\WINDOWS\SYSWOW64\user.exe
2018-02-14 12:22:04 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-02-14 12:22:04 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-02-14 12:22:04 ----A---- C:\WINDOWS\system32\mfps.dll
2018-02-14 12:22:03 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-02-14 12:22:02 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2018-02-14 12:22:02 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-02-14 12:22:02 ----A---- C:\WINDOWS\system32\MusNotification.exe
2018-02-14 12:22:01 ----A---- C:\WINDOWS\system32\usocore.dll
2018-02-14 12:22:01 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\vac.exe
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\cldapi.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-02-14 12:22:00 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\winsku.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\winresume.exe
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\winload.exe
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\ci.dll
2018-02-14 12:21:59 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Payments.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\Windows.Payments.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\sppobjs.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\rshx32.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\efscore.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\devinv.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVOrchestration.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVIntegration.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\AppVCatalog.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\appraiser.dll
2018-02-14 12:21:58 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\twext.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\usercpl.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\twext.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\shutdownux.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\netplwiz.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2018-02-14 12:21:57 ----A---- C:\WINDOWS\system32\authui.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\msvcp_win.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\hvsicontainerservice.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\sppwinob.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\pcasvc.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\msvcp_win.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\mf.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\generaltel.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\dsreg.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-02-14 12:21:56 ----A---- C:\WINDOWS\system32\aeinv.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\rtmpal.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\pcalua.exe
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\invagent.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\FntCache.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\aitstatic.exe
2018-02-14 12:21:55 ----A---- C:\WINDOWS\system32\aepic.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\wldp.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\sppcomapi.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\setup16.exe
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\rtmmvrortc.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\ortcengine.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeManagerObj.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\wldp.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\TransportDSA.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\rtmmvrortc.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\rasgcw.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\policymanager.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\ortcengine.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\FsIso.exe
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\efswrt.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\edputil.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\AppVShNotify.exe
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-02-14 12:21:54 ----A---- C:\WINDOWS\system32\AppManagementConfiguration.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\virtdisk.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\regsvr32.exe
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\IndexedDbLegacy.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\EnterpriseAppMgmtClient.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\edputil.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeHelper.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\DeviceReactivation.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\AppVClientPS.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\SYSWOW64\AppManagementConfiguration.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\wups2.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\WebClnt.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\virtdisk.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\tzres.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\shsetup.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\regsvr32.exe
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\FontProvider.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\drivers\npfs.sys
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\davclnt.dll
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-02-14 12:21:53 ----A---- C:\WINDOWS\system32\AppVClientPS.dll
2018-02-13 09:34:08 ----A---- C:\WINDOWS\system32\aswBoot.exe
2018-02-07 22:52:02 ----D---- C:\Users\tlumi\AppData\Roaming\NVIDIA

======List of files/folders modified in the last 1 month======

2018-03-01 08:01:02 ----D---- C:\WINDOWS\Temp
2018-03-01 08:00:57 ----RD---- C:\Program Files
2018-03-01 07:59:13 ----D---- C:\WINDOWS\Prefetch
2018-03-01 07:48:28 ----D---- C:\AdwCleaner
2018-03-01 07:39:34 ----D---- C:\WINDOWS\system32\sru
2018-02-28 22:57:04 ----D---- C:\ProgramData\NVIDIA
2018-02-28 22:56:46 ----D---- C:\Windows
2018-02-28 22:46:55 ----D---- C:\WINDOWS\System32
2018-02-28 22:46:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-02-28 22:40:22 ----D---- C:\WINDOWS\SoftwareDistribution
2018-02-28 22:26:18 ----D---- C:\Program Files (x86)\Steam
2018-02-28 17:36:50 ----D---- C:\WINDOWS\system32\SleepStudy
2018-02-28 12:07:55 ----D---- C:\WINDOWS\DeliveryOptimization
2018-02-28 12:06:55 ----HD---- C:\Program Files\WindowsApps
2018-02-28 12:06:55 ----D---- C:\WINDOWS\AppReadiness
2018-02-27 22:19:10 ----D---- C:\Users\tlumi\AppData\Roaming\TS3Client
2018-02-27 13:17:00 ----D---- C:\WINDOWS\system32\LogFiles
2018-02-26 21:17:10 ----D---- C:\WINDOWS\Logs
2018-02-26 21:17:03 ----D---- C:\WINDOWS\system32\config
2018-02-26 21:16:59 ----RD---- C:\WINDOWS\Microsoft.NET
2018-02-26 10:17:51 ----D---- C:\WINDOWS\system32\Tasks
2018-02-25 20:14:05 ----D---- C:\Users\tlumi\AppData\Roaming\EasyAntiCheat
2018-02-23 17:40:53 ----D---- C:\Games
2018-02-23 17:37:10 ----D---- C:\WINDOWS\INF
2018-02-23 17:37:09 ----D---- C:\WINDOWS\debug
2018-02-22 17:30:13 ----SHD---- C:\System Volume Information
2018-02-21 16:00:57 ----D---- C:\ProgramData\Package Cache
2018-02-21 16:00:56 ----SHD---- C:\WINDOWS\Installer
2018-02-21 16:00:51 ----D---- C:\WINDOWS\SysWOW64
2018-02-18 21:37:05 ----D---- C:\WINDOWS\WinSxS
2018-02-18 21:37:05 ----D---- C:\WINDOWS\system32\DriverStore
2018-02-16 14:46:08 ----D---- C:\WINDOWS\rescache
2018-02-16 09:43:11 ----D---- C:\ProgramData
2018-02-15 21:02:46 ----D---- C:\WINDOWS\system32\drivers
2018-02-15 21:02:21 ----D---- C:\WINDOWS\system32\catroot2
2018-02-15 21:02:00 ----D---- C:\WINDOWS\TextInput
2018-02-15 21:02:00 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-02-15 21:02:00 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-02-15 21:01:59 ----D---- C:\WINDOWS\system32\wbem
2018-02-15 21:01:59 ----D---- C:\WINDOWS\system32\oobe
2018-02-15 21:01:59 ----D---- C:\WINDOWS\system32\migration
2018-02-15 21:01:59 ----D---- C:\WINDOWS\system32\Boot
2018-02-15 21:01:59 ----D---- C:\WINDOWS\system32\appraiser
2018-02-15 21:01:59 ----D---- C:\WINDOWS\ShellExperiences
2018-02-15 21:01:59 ----D---- C:\WINDOWS\PolicyDefinitions
2018-02-15 21:01:59 ----D---- C:\WINDOWS\bcastdvr
2018-02-15 21:01:59 ----D---- C:\WINDOWS\apppatch
2018-02-15 21:01:55 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-02-14 12:26:02 ----D---- C:\WINDOWS\system32\MRT
2018-02-14 12:26:00 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-02-14 12:25:57 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-02-14 12:24:33 ----D---- C:\WINDOWS\CbsTemp
2018-02-14 12:23:31 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2018-02-13 09:40:48 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2018-02-13 09:39:20 ----D---- C:\WINDOWS\system32\Macromed
2018-02-13 09:39:18 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2018-02-13 09:39:17 ----AD---- C:\Program Files (x86)\7-Zip
2018-02-09 15:25:18 ----D---- C:\Users\tlumi\AppData\Roaming\Wargaming.net
2018-02-06 03:49:15 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-02-06 01:26:46 ----D---- C:\Users\tlumi\AppData\Roaming\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2017-12-21 199448]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2017-12-21 343768]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2017-12-21 57696]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2018-02-13 84368]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2018-02-13 379448]
R0 file_tracker;file_tracker; C:\WINDOWS\system32\DRIVERS\file_tracker.sys [2017-05-01 296736]
R0 fltsrv;Acronis Storage Filter Management; C:\WINDOWS\system32\DRIVERS\fltsrv.sys [2017-05-01 134432]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-09-29 56728]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2017-09-30 293272]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2013-10-28 22240]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2018-02-13 192944]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2017-12-21 321512]
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [2018-02-13 190440]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-07 41832]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2018-02-13 110328]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2018-02-13 1026696]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2018-02-13 459952]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-01-01 59800]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-09-29 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-09-29 8192]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2018-02-13 146648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2018-02-13 205464]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-02-10 385536]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-09-29 43520]
R2 npf;NetGroup Packet Filter Driver; \??\C:\Windows\system32\drivers\npf.sys [2017-01-02 36600]
R2 RfeCoSvc;RfeCoSvc; C:\WINDOWS\system32\DRIVERS\RfeCo10X64.sys [2017-11-19 132328]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2017-07-19 45752]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2017-08-19 139704]
R3 asmthub3;@oem7.inf,%asmthub3_ServiceDescription%;ASMedia USB3.1 Hub Service; C:\WINDOWS\System32\drivers\asmthub3.sys [2016-09-02 149888]
R3 asmtxhci;@oem11.inf,%asmtxhci_ServiceDescription%;ASMedia XHCI Service; C:\WINDOWS\system32\DRIVERS\asmtxhci.sys [2016-09-02 453504]
R3 e2xw10x64;@oem9.inf,%RIVET.Service.DispName%;NDIS Miniport Driver for Killer PCI-E Gigabit Ethernet Controller; C:\WINDOWS\System32\drivers\e2xw10x64.sys [2017-10-30 165608]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2018-02-28 26192]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2017-11-08 6033832]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2017-11-08 41080]
R3 MEIx64;@oem26.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2017-07-27 206496]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2017-02-14 111608]
R3 NVHDA;@oem1.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2018-01-04 226760]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5601d21ccd639df9\nvlddmkm.sys [2018-01-05 17486096]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2017-09-29 37784]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-09-29 357272]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-09-29 123800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-09-29 103320]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-09-29 63520]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-09-29 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-09-29 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2017-09-29 39832]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-09-29 118168]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-09-29 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-09-29 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2017-09-30 126872]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2017-09-30 158616]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2017-09-30 143768]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2018-02-13 46968]
S3 BstkDrv;BlueStacks Plus Hypervisor; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [2017-06-21 270904]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-29 39424]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-09-29 60312]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-09-29 122368]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-09-29 20992]
S3 GPUZ;GPUZ; \??\C:\Users\tlumi\AppData\Local\Temp\GPUZ.sys []
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-09-29 50584]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-09-29 73112]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2017-09-29 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-09-29 1723288]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-09-29 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-09-29 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-09-29 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-09-29 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-09-29 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-09-29 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-09-29 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-09-29 39424]
S3 invdimm;@invdimm.inf,%invdimm.SvcDesc%;Microsoft iNVDIMM device driver; C:\WINDOWS\System32\drivers\invdimm.sys [2017-09-29 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2017-09-29 26112]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-09-29 119808]
S3 KillerEth;@e2xw10x64.inf,%RIVET.Service.DispName%;NDIS Miniport Driver for Killer PCI-E Gigabit Ethernet Controller; C:\WINDOWS\System32\drivers\e2xw10x64.sys [2017-10-30 165608]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-09-29 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-09-29 55840]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-09-29 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-09-29 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-09-29 132608]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-09-29 88576]
S3 nvvad_WaveExtensible;@oem42.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2017-10-06 48064]
S3 nvvhci;@oem27.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2017-10-06 57792]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-09-29 100352]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2017-09-29 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-09-29 936856]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2017-09-29 103936]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-09-29 33176]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2014-08-14 1263424]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-05-01 3996664]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2017-11-27 83768]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-02-13 300600]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 CDPUserSvc_1e7b27c;Uživatelská služba platformy připojených zařízení_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 EasyTuneEngineService;EasyTune Engine; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [2017-06-01 147376]
R2 Killer Network Service x64;Killer Network Service; C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkService.exe [2017-11-19 2304192]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2017-04-24 419432]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2018-01-19 604312]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2018-01-04 464744]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2018-01-04 460920]
R2 OneSyncSvc_1e7b27c;Hostitel synchronizace_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2017-07-19 189264]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-02-10 519144]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-02-13 7564512]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R3 PimIndexMaintenanceSvc_1e7b27c;Data kontaktů_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 debugregsvc;@%SystemRoot%\system32\debugregsvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S2 gadjservice;GIGABYTE Adjust; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [2015-06-25 17920]
S2 Gservice;Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [2016-12-02 19888]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-30 153168]
S2 Intel(R) TPM Provisioning Service;Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [2017-02-24 548648]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2017-04-24 196712]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S2 OcButtonService;OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [2017-06-01 123824]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-11-02 3002728]
S2 Razer Chroma SDK Server;Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2017-09-15 435328]
S2 Razer Chroma SDK Service;Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [2017-09-18 745120]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-02-13 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-11-20 6971400]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DeveloperToolsService;Developer Tools Service; C:\WINDOWS\System32\DeveloperToolsSvc.exe [2017-11-19 123392]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc_1e7b27c;Tok zařízení_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-09-29 85504]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-02-25 774312]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-11-19 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-30 153168]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2017-07-15 194032]
S3 HnGSteamService;Heroes & Generals Steam Service; D:\Program Files (x86)\SteamLibrary\steamapps\common\Heroes & Generals\hngservice.exe [2018-02-13 777000]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 HwmRecordService;Hardware Monitor Record service; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [2017-07-12 118216]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2015-06-03 217888]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2017-02-24 732448]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2017-12-11 672568]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService_1e7b27c;Služba zasílání zpráv_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-01-29 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-11-02 2123104]
S3 OverwolfUpdater;Overwolf Updater Windows SCM; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10 1450824]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc_1e7b27c;PrintWorkflow_1e7b27c; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2017-11-26 4329952]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-09-29 1288704]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-02-10 819096]

-----------------EOF-----------------

Ahoj

Poprosim o log z AdwCleaneru:

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Scan (Skenovanie) a pockaj na dokoncenie
• Klikni na Clean (Cistenie) a potvrd kliknutim na OK
• AdwCleaner si vyziada restart PC, potvrd kliknutim na Restart Now (Restartovat teraz)
• Po dokonceni a restartovani PC vyskoci log, jeho obsah sem skopiruj

Zdravím tady je log z Adwcleaneru

# AdwCleaner 7.0.8.0 - Logfile created on Fri Mar 02 12:10:57 2018
# Updated on 2018/08/02 by Malwarebytes
# Database: 02-27-2018.1
# Running on Windows 10 Pro (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.DriverDoc, C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF}


***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1146 B] - [2017/5/17 11:57:40]
C:/AdwCleaner/AdwCleaner[C2].txt - [1292 B] - [2017/5/27 11:44:21]
C:/AdwCleaner/AdwCleaner[C3].txt - [1439 B] - [2017/5/31 20:5:29]
C:/AdwCleaner/AdwCleaner[C4].txt - [1673 B] - [2017/7/1 19:7:33]
C:/AdwCleaner/AdwCleaner[C5].txt - [3509 B] - [2017/7/3 18:45:21]
C:/AdwCleaner/AdwCleaner[S0].txt - [1423 B] - [2017/5/17 11:56:6]
C:/AdwCleaner/AdwCleaner[S10].txt - [1954 B] - [2017/8/24 13:3:13]
C:/AdwCleaner/AdwCleaner[S11].txt - [2022 B] - [2017/9/7 7:5:14]
C:/AdwCleaner/AdwCleaner[S12].txt - [2088 B] - [2017/9/19 9:11:46]
C:/AdwCleaner/AdwCleaner[S13].txt - [2156 B] - [2017/10/3 9:3:5]
C:/AdwCleaner/AdwCleaner[S14].txt - [2222 B] - [2017/10/19 16:49:21]
C:/AdwCleaner/AdwCleaner[S15].txt - [2292 B] - [2017/10/30 19:35:23]
C:/AdwCleaner/AdwCleaner[S16].txt - [2362 B] - [2017/11/9 11:5:14]
C:/AdwCleaner/AdwCleaner[S17].txt - [2732 B] - [2017/12/10 18:46:3]
C:/AdwCleaner/AdwCleaner[S18].txt - [2499 B] - [2017/12/10 18:49:7]
C:/AdwCleaner/AdwCleaner[S19].txt - [2568 B] - [2017/12/14 8:10:28]
C:/AdwCleaner/AdwCleaner[S1].txt - [1798 B] - [2017/5/27 11:44:12]
C:/AdwCleaner/AdwCleaner[S20].txt - [2637 B] - [2017/12/19 14:58:46]
C:/AdwCleaner/AdwCleaner[S21].txt - [2707 B] - [2017/12/29 15:3:16]
C:/AdwCleaner/AdwCleaner[S22].txt - [2776 B] - [2018/1/4 12:5:56]
C:/AdwCleaner/AdwCleaner[S23].txt - [2843 B] - [2018/1/7 21:5:5]
C:/AdwCleaner/AdwCleaner[S24].txt - [2909 B] - [2018/1/15 13:24:7]
C:/AdwCleaner/AdwCleaner[S25].txt - [2977 B] - [2018/1/27 22:7:7]
C:/AdwCleaner/AdwCleaner[S26].txt - [3044 B] - [2018/2/1 13:8:59]
C:/AdwCleaner/AdwCleaner[S27].txt - [3111 B] - [2018/2/13 8:49:24]
C:/AdwCleaner/AdwCleaner[S28].txt - [3259 B] - [2018/2/28 21:21:43]
C:/AdwCleaner/AdwCleaner[S29].txt - [3328 B] - [2018/2/28 21:28:41]
C:/AdwCleaner/AdwCleaner[S2].txt - [1944 B] - [2017/5/31 20:0:12]
C:/AdwCleaner/AdwCleaner[S30].txt - [3397 B] - [2018/2/28 21:38:48]
C:/AdwCleaner/AdwCleaner[S31].txt - [3444 B] - [2018/2/28 21:41:44]
C:/AdwCleaner/AdwCleaner[S32].txt - [3513 B] - [2018/2/28 21:45:31]
C:/AdwCleaner/AdwCleaner[S33].txt - [3582 B] - [2018/3/1 6:48:28]
C:/AdwCleaner/AdwCleaner[S34].txt - [3649 B] - [2018/3/1 7:43:27]
C:/AdwCleaner/AdwCleaner[S3].txt - [2128 B] - [2017/7/1 19:7:11]
C:/AdwCleaner/AdwCleaner[S4].txt - [1955 B] - [2017/7/1 19:10:44]
C:/AdwCleaner/AdwCleaner[S5].txt - [2309 B] - [2017/7/3 18:45:13]
C:/AdwCleaner/AdwCleaner[S6].txt - [2172 B] - [2017/7/14 19:20:36]
C:/AdwCleaner/AdwCleaner[S7].txt - [1917 B] - [2017/7/25 16:15:20]
C:/AdwCleaner/AdwCleaner[S8].txt - [1818 B] - [2017/7/31 11:15:5]
C:/AdwCleaner/AdwCleaner[S9].txt - [2195 B] - [2017/8/24 12:59:26]


########## EOF - C:\AdwCleaner\AdwCleaner[S35].txt ##########

Poprosim o obidva logy z FRST podla tohto navodu (FRST.txt a Addition.txt): https://forum.viry.cz/viewtopic.php?f=13&t=152707

V pripade, ze sa FRSTLauncher nebude dat stiahnut alebo spustit, pouzi iba samotny FRST.

Ak sa logy nezmestia do jedneho prispevku, zabal ich do archivu RAR alebo ZIP a posli ako prilohu.

Tady je ten log , je to v raru .

a ten druhej tady .

Ak nepouzivas, odporucam odinstalovat nasledujuce programy (a napis ako si sa rozhodol):

• Google Toolbar for Internet Explorer
  McAfee WebAdvisor

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM-x32\...\Run: [] => [X]
  HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\MountPoints2: {1ff35604-d136-11e7-b562-1c1b0dacba33} - "F:\HiSuiteDownLoader.exe" 
  HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\MountPoints2: {76c2542f-eef3-11e7-ab91-1c1b0dacba33} - "F:\HiSuiteDownLoader.exe" 
  S3 GPUZ; \??\C:\Users\tlumi\AppData\Local\Temp\GPUZ.sys [X] <==== ATTENTION
  Task: {C3BD155C-2754-4C76-A0EE-E100B33DA37F} - System32\Tasks\Chromium dofem => C:\Windows\system32\wscript.exe "C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}\loro.txt" "68747470733a2f2f6b6174756e61712e636f6d" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d423333332d3645353032393731453539457d5c63696e656465" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d (the data entry has 84 more characters). <==== ATTENTION
  Task: C:\WINDOWS\Tasks\Chromium dofem.job => Wscript.exe  C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}\loro.txt <==== ATTENTION
  AlternateDataStreams: C:\Users\tlumi:Heroes & Generals [38]
  HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
  HKLM\...\StartupApproved\Run32: => "seznam-listicka-distribuce"
  HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"
  HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
  C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}
  C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF}
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

fixnuto

Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by tlumi (02-03-2018 20:12:50) Run:1
Running from C:\Users\tlumi\Desktop
Loaded Profiles: tlumi (Available Profiles: tlumi)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\MountPoints2: {1ff35604-d136-11e7-b562-1c1b0dacba33} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\MountPoints2: {76c2542f-eef3-11e7-ab91-1c1b0dacba33} - "F:\HiSuiteDownLoader.exe"
S3 GPUZ; \??\C:\Users\tlumi\AppData\Local\Temp\GPUZ.sys [X] <==== ATTENTION
Task: {C3BD155C-2754-4C76-A0EE-E100B33DA37F} - System32\Tasks\Chromium dofem => C:\Windows\system32\wscript.exe "C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}\loro.txt" "68747470733a2f2f6b6174756e61712e636f6d" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d423333332d3645353032393731453539457d5c63696e656465" "433a5c50726f6772616d446174615c7b42464237374144342d333546352d463031322d (the data entry has 84 more characters). <==== ATTENTION
Task: C:\WINDOWS\Tasks\Chromium dofem.job => Wscript.exe C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}\loro.txt <==== ATTENTION
AlternateDataStreams: C:\Users\tlumi:Heroes & Generals [38]
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "seznam-listicka-distribuce"
HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"
HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E}
C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF}

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1ff35604-d136-11e7-b562-1c1b0dacba33}" => removed successfully
HKLM\Software\Classes\CLSID\{1ff35604-d136-11e7-b562-1c1b0dacba33} => key not found
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{76c2542f-eef3-11e7-ab91-1c1b0dacba33}" => removed successfully
HKLM\Software\Classes\CLSID\{76c2542f-eef3-11e7-ab91-1c1b0dacba33} => key not found
"HKLM\System\CurrentControlSet\Services\GPUZ" => removed successfully
GPUZ => service removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3BD155C-2754-4C76-A0EE-E100B33DA37F} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3BD155C-2754-4C76-A0EE-E100B33DA37F} => could not remove key. ErrorCode1: 0x00000002
C:\WINDOWS\System32\Tasks\Chromium dofem => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Chromium dofem => could not remove key. ErrorCode1: 0x00000002
C:\WINDOWS\Tasks\Chromium dofem.job => moved successfully
C:\Users\tlumi => ":Heroes & Generals" ADS removed successfully
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk" => not found
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\McAfee Security Scan Plus.lnk" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\seznam-listicka-distribuce" => removed successfully
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce" => not found
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\cz.seznam.software.szndesktop" => removed successfully
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop" => not found
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\cz.seznam.software.autoupdate" => removed successfully
"HKU\S-1-5-21-2280150994-1094320777-3346966172-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate" => not found
C:\ProgramData\{BFB77AD4-35F5-F012-B333-6E502971E59E} => moved successfully
C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF} => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 9199616 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 131033284 B
Java, Flash, Steam htmlcache => 363852250 B
Windows/system/drivers => 374818 B
Edge => 12892 B
Chrome => 466244 B
Firefox => 390880380 B
Opera => 163840 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 16388904 B
systemprofile32 => 0 B
LocalService => 818 B
NetworkService => 0 B
tlumi => 67163391 B

RecycleBin => 0 B
EmptyTemp: => 934.2 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 02-03-2018 20:14:13)


Result of scheduled keys to remove after reboot:

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3BD155C-2754-4C76-A0EE-E100B33DA37F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3BD155C-2754-4C76-A0EE-E100B33DA37F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Chromium dofem" => removed successfully

==== End of Fixlog 20:14:13 ====

Log uz vyzera OK; zlozka, ktoru nasiel AdwCleaner bola odstranena.

Su este s PC nejake problemy?

Projel jsem to Adwcleanerem a žádný nežádoucí prvek nenalezen .
Děkuji

Tak este upraceme po pouzitych nastrojoch:

• Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
• Uloz na plochu a spusti
• Nechaj oznacenu moznost "Remove disinfection tools"
• Klikni na "Run"

Skontroluj velkost plochy (C:\Users\tlumi\Desktop). Ak je vacsia ako 300 MB, presun vsetky subory a zlozky z plochy do dokumentov a na ploche nechaj iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.

Tak jsem to projrl delfixem a vyhodil mě tenhle log


# DelFix v1.013 - Logfile created 03/03/2018 at 17:55:14
# Updated 17/04/2016 by Xplode
# Username : tlumi - DESKTOP-3UUVCOU
# Operating System : Windows 10 Pro (64 bits)

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\Users\tlumi\Downloads\adwcleaner_7.0.8.0.exe
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

########## - EOF - ##########
velikost plochy mám 200mb
děkuji

Vyzera to OK. Ak uz nie su ziadne problemy, tak z mojej strany vsetko.

Nie je zaco, rad som pomohol