Pomalý internet
Napsal: 14 bře 2018 11:01
Dobrý den,
poslední dobou jsem pociťoval výrazné a nárazové zpomalování internetu, počítač jsme projel MBam skenerem a našel a odstranil nějaké BitCoin minery (vůbec nevím, jak se tam dostaly).
Prosil bych tedy ještě o kontrolu, jestli není v PC ještě nějaká havěť.
Děkuji moc.
LOG RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Václav at 2018-03-14 10:59:49
Microsoft Windows 10 Home
System drive C: has 8 GB (3%) free of 237 GB
Total RAM: 8067 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:59:51, on 14.03.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
C:\WINDOWS\syswow64\backgroundTaskHost.exe
C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe
C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files\trend micro\Václav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8888
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "c:\program files (x86)\cisco\cisco anyconnect secure mobility client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Programy\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [BrHelp] C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN
O4 - HKLM\..\Run: [IncrediBuild Agent Monitor] C:\Program Files (x86)\Xoreax\IncrediBuild\BuildTrayIcon.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Václav\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "D:\Programy\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe" Minimum
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify] C:\Users\Václav\AppData\Roaming\Spotify\Spotify.exe --autostart
O4 - HKCU\..\Run: [5KPlayer] "C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe" -auto
O4 - HKCU\..\Run: [Spotify Web Helper] C:\Users\Václav\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
O4 - HKCU\..\Run: [Discord] C:\Users\Václav\AppData\Local\Discord\app-0.0.300\Discord.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'MSSQL$SQLEXPRESS')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'MSSQL$SQLEXPRESS')
O4 - Global Startup: Avid Application Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\Program Files\Microsoft Office\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\Program Files\Microsoft Office\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{057f3a50-0b47-42bf-a52f-684634b9bd96}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{ada053a4-69ba-422a-bfed-d02915a0d7b6}: NameServer = 8.8.8.8 8.8.4.4 4.2.2.1 4.2.2.2 208.67.222.222 208.67.220.220 8.26.56.26 8.20.247.20 156.154.70.1 156.154.71.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{057f3a50-0b47-42bf-a52f-684634b9bd96}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Xamarin Bonjour Service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: Služba Poepnutí Bluetooth (BtSwitcherService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Služba CSR Bluetooth Audio (CSRBtAudioService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe
O23 - Service: Služba CSR OBEX (CsrBtOBEXService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe
O23 - Service: CSR služba Bluetooth (CsrBtService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: DTS APO Service (dts_apo_service) - Unknown owner - C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: IncrediBuild Agent (IncrediBuild_Agent) - Xoreax Software Ltd. - C:\Program Files (x86)\Xoreax\IncrediBuild\BuildService.exe
O23 - Service: IncrediBuild Coordinator (IncrediBuild_Coordinator) - Xoreax Software Ltd. - C:\Program Files (x86)\Xoreax\IncrediBuild\CoordService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - D:\Programy\Overwolf\OverwolfUpdater.exe
O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
O23 - Service: Protexis Licensing V2 x64 (PSI_SVC_2_x64) - arvato digital services llc - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - Tempo Semiconductor Inc - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - TunnelBear - D:\Programy\TunnelBear\TBear.Maintenance.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
--
End of file - 16229 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-8cdd9768-2db9-44b9-8986-27ec021f141f -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0772d4b1-a01a-4859-9c3f-e27afaa2da87 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-4e62b42a-459b-4c40-9f5d-d886397a2dd6 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5233a11f-08bb-4882-8bbe-34a2acc2e791 -LifetimeId:7b9b70fe-3554-4464-b5bd-017a77c13475 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s gpsvc
c:\windows\system32\svchost.exe -k networkservice -s TermService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-51108045-583b-42d9-9061-cdcc2e688ac8 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5ca780a8-b6e7-4c17-98cf-10922c003ce7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-27d027c1-d75c-4fcc-8f1b-1bc37d60252a -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0219fbec-3510-4564-a467-871d422e093c -LifetimeId:651c3a63-f431-4830-b9e5-0daeb75b560d -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k localservice -p -s SEMgrSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k netsvcs -p -s SessionEnv
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Eaphost
C:\WINDOWS\system32\AUDIODG.EXE 0x3e4
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s dot3svc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\Program Files (x86)\Xoreax\IncrediBuild\CoordService.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
"C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Xoreax\IncrediBuild\BuildService.exe"
"D:\Programy\TunnelBear\TBear.Maintenance.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe"
dashost.exe {35695f4f-73e0-46e0-b06c6589bbb01df8}
"C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe" --type=host --mojo-pipe-token=510D055F8156319C0F37014959A0E88F --mojo-platform-channel-handle=816
"C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\compattelrunner.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s upnphost
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe" scan upload
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wermgr.exe -upload
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\WINDOWS\syswow64\backgroundTaskHost.exe" -ServerName:x554f661dyd360y462cy8743yf8a99b7d41dbx.AppX4dk7vkdnkgcgr5gkh4y65jw2he6g822b.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1807.264.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXggkaqzf6p31g37n0m8phzeswb0rt9m7e.mca
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
c:\windows\system32\svchost.exe -k localservice -p -s PhoneSvc
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
c:\windows\system32\svchost.exe -k localservice -p -s fdPHost
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s FDResPub
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s HomeGroupProvider
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\TOSHIBA\System Setting\TCrdMain_Win8.exe"
"C:\Program Files\TOSHIBA\System Setting\Hotkey\TcrdKBB.exe"
"C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe" Minimum
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Václav\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Václav\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Václav\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=65.0.3325.162 --initial-client-data=0x1d4,0x1d8,0x1dc,0x1d0,0x1e0,0x7ffc1358f1e8,0x7ffc1358f1f8,0x7ffc1358f208
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=15828 --on-initialized-event-handle=660 --parent-handle=664 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --gpu-preferences=KAAAAAAAAAAABwAAAQAAAAAAAAAAAGAAAQAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4358 --gpu-driver-date=12-21-2015 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x1292 --service-request-channel-token=2C53CB290A8258D3B3231345A35DF3DD --mojo-platform-channel-handle=1544 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=6E43C2F7F9A6708A253CDE960FE7FC87 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=6E43C2F7F9A6708A253CDE960FE7FC87 --renderer-client-id=3 --mojo-platform-channel-handle=2252 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=4362E4C78B45B7BD36D63F283E2C5969 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=4362E4C78B45B7BD36D63F283E2C5969 --renderer-client-id=4 --mojo-platform-channel-handle=3060 /prefetch:1
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=ADA7F2AF178D862170FCAF5D545AC2F6 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=ADA7F2AF178D862170FCAF5D545AC2F6 --renderer-client-id=5 --mojo-platform-channel-handle=3280 /prefetch:1
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=81159EC260B19BE33382CDF4CD49460E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=81159EC260B19BE33382CDF4CD49460E --renderer-client-id=6 --mojo-platform-channel-handle=3148 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=A97A323A5635F543A2F6D2EB8733001E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=A97A323A5635F543A2F6D2EB8733001E --renderer-client-id=7 --mojo-platform-channel-handle=3404 /prefetch:1
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:InQEPHrk002+1ARN.1
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe" --launcher=TaskScheduler
"C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe"
wmiadap.exe /F /T /R
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=E27A6119E20BC12D4F08ABE7CED12AF5 --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=E27A6119E20BC12D4F08ABE7CED12AF5 --renderer-client-id=24 --mojo-platform-channel-handle=7332 /prefetch:1
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=2B8C1AF66106A7A67F0491DBEF06F8D0 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=2B8C1AF66106A7A67F0491DBEF06F8D0 --renderer-client-id=25 --mojo-platform-channel-handle=7640 /prefetch:1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s wisvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=3774746B74B0F04CFB03381C8EE4DB91 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=3774746B74B0F04CFB03381C8EE4DB91 --renderer-client-id=27 --mojo-platform-channel-handle=8112 /prefetch:1
taskhostw.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
"C:\Program Files\NVIDIA Corporation\Drs\dbInstaller.exe" -update C:\Users\Václav\AppData\Local\NVIDIA Corporation\NvProfileUpdater\drs\update.dat
taskhostw.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{133EAC4F-5891-4D04-BADA-D84870380A80}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=B95570F0967E5B7C5995E1F95F1C905B --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=B95570F0967E5B7C5995E1F95F1C905B --renderer-client-id=29 --mojo-platform-channel-handle=8220 /prefetch:1
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Václav\Downloads\RSITx64.exe"
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-03-13 214208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-03-21 551520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-03-13 2888896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-21 212576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-03-13 151232]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-03-13 1955528]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]
"TCrdMain"=C:\Program Files\Toshiba\System Setting\TCrdMain_Win8.exe [2015-10-09 559920]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2017-05-03 1893496]
"CsrHCRPServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [2012-03-22 1134288]
"CsrAudioguiCtrl"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [2012-03-22 511696]
"CsrSyncMLServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [2012-03-22 244944]
"vksts"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [2012-03-22 25792]
"HarmonyUserStartup"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [2012-03-22 39128]
"CSRHarmonySkypePlugin"=C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [2012-03-22 146656]
"TrayApplication"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [2012-03-22 529616]
"AdobeGCInvoker-1.0"=C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05 315880]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Václav\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-11-06 1685704]
"Steam"=D:\Programy\Steam\steam.exe [2017-12-15 3111712]
"Bloody2"=C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe [2017-04-14 19405824]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]
"Spotify"=C:\Users\Václav\AppData\Roaming\Spotify\Spotify.exe [2018-01-25 21099408]
"5KPlayer"=C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe [2017-08-03 26735424]
"Spotify Web Helper"=C:\Users\Václav\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018-01-25 780688]
"Discord"=C:\Users\Václav\AppData\Local\Discord\app-0.0.300\Discord.exe [2018-01-08 57821176]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2015-12-10 493568]
"Cisco AnyConnect Secure Mobility Agent for Windows"=c:\program files (x86)\cisco\cisco anyconnect secure mobility client\vpnui.exe [2016-02-29 766464]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
"PSUAMain"=C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [2017-02-22 141760]
"PWRISOVM.EXE"=D:\Programy\PowerISO\PWRISOVM.EXE [2016-05-25 406664]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2014-06-16 139776]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2014-05-22 4513792]
"BrHelp"=C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [2013-03-07 1944576]
"IncrediBuild Agent Monitor"=C:\Program Files (x86)\Xoreax\IncrediBuild\BuildTrayIcon.exe [2017-08-28 189920]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Avid Application Manager.lnk - C:\WINDOWS\Installer\{99E377DB-D2D0-44A5-8533-AA8BE1381644}\NewShortcut1_E1E0FF1FC1474601A40EFEF248F11D43.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
IVTCredentialProvider
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"MaxGPOScriptWait"=600
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.dvacm_vspx7"=d:\Programy\Corel VideoStudio Pro X7\Dvacm.acm
"VIDC.FPS1"=frapsv64.dll
"VIDC.LAGS"=lagarith.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "D:\Programy\PSPad editor\PSPad.exe" "%1"
======List of files/folders created in the last 1 month======
2018-03-14 10:59:49 ----D---- C:\rsit
2018-03-14 10:17:45 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-03-14 10:17:41 ----A---- C:\WINDOWS\system32\drivers\mbae64.sys
2018-03-14 10:17:31 ----D---- C:\Program Files\Malwarebytes
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\AcSpecfc.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-03-13 23:45:33 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-03-13 23:45:32 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-03-13 23:45:32 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-03-13 23:45:31 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-03-13 23:45:31 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-03-13 23:45:31 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2018-03-13 23:45:31 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\samsrv.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2018-03-13 23:45:29 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-03-13 23:45:29 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-03-13 23:45:27 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-03-13 23:45:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\system32\jscript.dll
2018-03-13 23:45:25 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-03-13 23:45:25 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-03-13 23:45:24 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-03-13 23:45:23 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-03-13 23:45:23 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-03-13 23:45:22 ----A---- C:\WINDOWS\system32\wininet.dll
2018-03-13 23:45:22 ----A---- C:\WINDOWS\system32\AcSpecfc.dll
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\msIso.dll
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2018-03-13 23:45:20 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-03-13 23:45:19 ----A---- C:\WINDOWS\system32\winmde.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-03-13 23:45:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\generaltel.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\appraiser.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\aeinv.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\usocore.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\cdp.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\MusNotification.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\devinv.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\aepic.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\pcasvc.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\invagent.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\aitstatic.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Payments.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\AuthFWSnapin.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\Windows.Payments.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\msra.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\msi.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\DbgModel.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\AuthFWSnapin.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\msisip.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountWAMExtension.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\IndexedDbLegacy.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\zipfldr.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\winsrv.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\UsoClient.exe
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\updatecsp.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\svf.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\SpectrumSyncClient.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\pcalua.exe
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\offlinesam.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\msisip.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\IndexedDbLegacy.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\wcnfs.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\credssp.dll
2018-03-13 17:51:36 ----D---- C:\Program Files\Microsoft Office 15
2018-03-13 16:21:48 ----SHD---- C:\Config.Msi
2018-03-13 16:17:34 ----D---- C:\Users\Václav\AppData\Roaming\dvdcss
2018-03-13 13:29:29 ----D---- C:\WINDOWS\system32\drivers\wd
2018-03-10 21:40:43 ----D---- C:\Users\Václav\AppData\Roaming\discord
2018-03-10 05:07:05 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-03-08 18:51:33 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2018-03-08 18:51:32 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-03-08 18:51:32 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-03-08 18:51:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-03-08 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\actxprxy.dll
2018-03-08 18:51:21 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-03-08 18:51:18 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\hal.dll
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\storufs.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-03-08 18:51:14 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2018-03-08 18:51:14 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\evr.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-03-08 18:51:05 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-03-08 18:51:00 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\winhttp.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\dnsapi.dll
2018-03-08 18:50:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-03-08 18:50:57 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2018-03-08 18:50:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-03-08 18:50:55 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2018-03-08 18:50:55 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\schedsvc.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\services.exe
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-03-08 18:50:52 ----A---- C:\WINDOWS\system32\wlansec.dll
2018-03-08 18:50:51 ----A---- C:\WINDOWS\system32\wwansvc.dll
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\wmp.dll
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-03-08 18:50:44 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-03-08 18:50:43 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-03-08 18:50:43 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\wuauclt.exe
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\ISM.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-03-08 18:50:38 ----A---- C:\WINDOWS\system32\StartTileData.dll
2018-03-08 18:50:38 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2018-03-08 18:50:36 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\comdlg32.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\wow64.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\twinui.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\sspicli.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\system32\LogonController.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\explorer.exe
2018-03-08 18:50:32 ----A---- C:\WINDOWS\system32\shell32.dll
2018-03-08 18:50:30 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-03-08 18:50:24 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2018-03-08 18:50:23 ----A---- C:\WINDOWS\system32\vac.exe
2018-03-08 18:50:16 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\SRH.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-03-08 18:50:15 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-03-08 18:50:14 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-03-08 18:50:14 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-03-08 18:50:10 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-03-08 18:50:10 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2018-03-08 18:50:05 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\sppobjs.dll
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\runexehelper.exe
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-03-08 18:50:04 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-03-08 18:50:03 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2018-03-08 18:50:02 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\ci.dll
2018-03-08 18:50:01 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-03-08 18:50:01 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\usercpl.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\winload.exe
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\tquery.dll
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\mssrch.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-03-08 18:49:57 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provtool.exe
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provhandlers.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provengine.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\SYSWOW64\StateRepository.Core.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\Wpc.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\UserDataService.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\sppwinob.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-03-08 18:49:52 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2018-03-08 18:49:52 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\winlogon.exe
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\mf.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\wpncore.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\mmc.exe
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\InputService.dll
2018-03-08 18:49:48 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-03-08 18:49:48 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\VSSVC.exe
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\usermgr.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\rtmpal.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\ole32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-03-08 18:49:46 ----A---- C:\WINDOWS\system32\WpcMon.exe
2018-03-08 18:49:46 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-03-08 18:49:45 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\FntCache.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\Unistore.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\sysmain.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\ieui.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\wlansvc.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\inetcomm.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\atmfd.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\wifitask.exe
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\SEMgrSvc.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\msvcp_win.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\EncDec.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\authui.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\shutdownux.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2018-03-08 18:49:39 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2018-03-08 18:49:39 ----A---- C:\WINDOWS\system32\winresume.exe
2018-03-08 18:49:39 ----A---- C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-03-08 18:49:37 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2018-03-08 18:49:37 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-03-08 18:49:37 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\setupapi.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\efswrt.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\efscore.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\APHostService.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\policymanager.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\localspl.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2018-03-08 18:49:34 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\ncsi.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\mssvp.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\advapi32.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeManagerObj.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\p2psvc.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\lsm.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\container.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\AppLockerCSP.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\msvcp_win.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\SyncController.dll
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\NaturalAuth.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\SettingSync.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\Magnify.exe
2018-03-08 18:49:29 ----A---- C:\WINDOWS\SYSWOW64\d3d11_3SDKLayers.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\winbrand.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\webio.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\vssapi.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\skci.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\P2P.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\rastls.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\mfps.dll
poslední dobou jsem pociťoval výrazné a nárazové zpomalování internetu, počítač jsme projel MBam skenerem a našel a odstranil nějaké BitCoin minery (vůbec nevím, jak se tam dostaly).
Prosil bych tedy ještě o kontrolu, jestli není v PC ještě nějaká havěť.
Děkuji moc.
LOG RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Václav at 2018-03-14 10:59:49
Microsoft Windows 10 Home
System drive C: has 8 GB (3%) free of 237 GB
Total RAM: 8067 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:59:51, on 14.03.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
C:\WINDOWS\syswow64\backgroundTaskHost.exe
C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe
C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files\trend micro\Václav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8888
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "c:\program files (x86)\cisco\cisco anyconnect secure mobility client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Programy\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [BrHelp] C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN
O4 - HKLM\..\Run: [IncrediBuild Agent Monitor] C:\Program Files (x86)\Xoreax\IncrediBuild\BuildTrayIcon.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Václav\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "D:\Programy\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe" Minimum
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify] C:\Users\Václav\AppData\Roaming\Spotify\Spotify.exe --autostart
O4 - HKCU\..\Run: [5KPlayer] "C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe" -auto
O4 - HKCU\..\Run: [Spotify Web Helper] C:\Users\Václav\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
O4 - HKCU\..\Run: [Discord] C:\Users\Václav\AppData\Local\Discord\app-0.0.300\Discord.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'MSSQL$SQLEXPRESS')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'MSSQL$SQLEXPRESS')
O4 - Global Startup: Avid Application Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\Program Files\Microsoft Office\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\Program Files\Microsoft Office\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{057f3a50-0b47-42bf-a52f-684634b9bd96}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{ada053a4-69ba-422a-bfed-d02915a0d7b6}: NameServer = 8.8.8.8 8.8.4.4 4.2.2.1 4.2.2.2 208.67.222.222 208.67.220.220 8.26.56.26 8.20.247.20 156.154.70.1 156.154.71.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{057f3a50-0b47-42bf-a52f-684634b9bd96}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Xamarin Bonjour Service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: Služba Poepnutí Bluetooth (BtSwitcherService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Služba CSR Bluetooth Audio (CSRBtAudioService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe
O23 - Service: Služba CSR OBEX (CsrBtOBEXService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe
O23 - Service: CSR služba Bluetooth (CsrBtService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: DTS APO Service (dts_apo_service) - Unknown owner - C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: IncrediBuild Agent (IncrediBuild_Agent) - Xoreax Software Ltd. - C:\Program Files (x86)\Xoreax\IncrediBuild\BuildService.exe
O23 - Service: IncrediBuild Coordinator (IncrediBuild_Coordinator) - Xoreax Software Ltd. - C:\Program Files (x86)\Xoreax\IncrediBuild\CoordService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - D:\Programy\Overwolf\OverwolfUpdater.exe
O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
O23 - Service: Protexis Licensing V2 x64 (PSI_SVC_2_x64) - arvato digital services llc - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - Tempo Semiconductor Inc - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - TunnelBear - D:\Programy\TunnelBear\TBear.Maintenance.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
--
End of file - 16229 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-8cdd9768-2db9-44b9-8986-27ec021f141f -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0772d4b1-a01a-4859-9c3f-e27afaa2da87 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-4e62b42a-459b-4c40-9f5d-d886397a2dd6 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5233a11f-08bb-4882-8bbe-34a2acc2e791 -LifetimeId:7b9b70fe-3554-4464-b5bd-017a77c13475 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s gpsvc
c:\windows\system32\svchost.exe -k networkservice -s TermService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-51108045-583b-42d9-9061-cdcc2e688ac8 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5ca780a8-b6e7-4c17-98cf-10922c003ce7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-27d027c1-d75c-4fcc-8f1b-1bc37d60252a -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0219fbec-3510-4564-a467-871d422e093c -LifetimeId:651c3a63-f431-4830-b9e5-0daeb75b560d -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k localservice -p -s SEMgrSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k netsvcs -p -s SessionEnv
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Eaphost
C:\WINDOWS\system32\AUDIODG.EXE 0x3e4
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s dot3svc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\Program Files (x86)\Xoreax\IncrediBuild\CoordService.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
"C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Xoreax\IncrediBuild\BuildService.exe"
"D:\Programy\TunnelBear\TBear.Maintenance.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe"
dashost.exe {35695f4f-73e0-46e0-b06c6589bbb01df8}
"C:\Program Files (x86)\Google\Chrome Remote Desktop\65.0.3325.40\remoting_host.exe" --type=host --mojo-pipe-token=510D055F8156319C0F37014959A0E88F --mojo-platform-channel-handle=816
"C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\compattelrunner.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s upnphost
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe" scan upload
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wermgr.exe -upload
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\WINDOWS\syswow64\backgroundTaskHost.exe" -ServerName:x554f661dyd360y462cy8743yf8a99b7d41dbx.AppX4dk7vkdnkgcgr5gkh4y65jw2he6g822b.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1807.264.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXggkaqzf6p31g37n0m8phzeswb0rt9m7e.mca
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
c:\windows\system32\svchost.exe -k localservice -p -s PhoneSvc
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
c:\windows\system32\svchost.exe -k localservice -p -s fdPHost
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s FDResPub
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s HomeGroupProvider
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\TOSHIBA\System Setting\TCrdMain_Win8.exe"
"C:\Program Files\TOSHIBA\System Setting\Hotkey\TcrdKBB.exe"
"C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe" Minimum
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Václav\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Václav\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Václav\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=65.0.3325.162 --initial-client-data=0x1d4,0x1d8,0x1dc,0x1d0,0x1e0,0x7ffc1358f1e8,0x7ffc1358f1f8,0x7ffc1358f208
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=15828 --on-initialized-event-handle=660 --parent-handle=664 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --gpu-preferences=KAAAAAAAAAAABwAAAQAAAAAAAAAAAGAAAQAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4358 --gpu-driver-date=12-21-2015 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x1292 --service-request-channel-token=2C53CB290A8258D3B3231345A35DF3DD --mojo-platform-channel-handle=1544 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=6E43C2F7F9A6708A253CDE960FE7FC87 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=6E43C2F7F9A6708A253CDE960FE7FC87 --renderer-client-id=3 --mojo-platform-channel-handle=2252 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=4362E4C78B45B7BD36D63F283E2C5969 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=4362E4C78B45B7BD36D63F283E2C5969 --renderer-client-id=4 --mojo-platform-channel-handle=3060 /prefetch:1
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=ADA7F2AF178D862170FCAF5D545AC2F6 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=ADA7F2AF178D862170FCAF5D545AC2F6 --renderer-client-id=5 --mojo-platform-channel-handle=3280 /prefetch:1
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=81159EC260B19BE33382CDF4CD49460E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=81159EC260B19BE33382CDF4CD49460E --renderer-client-id=6 --mojo-platform-channel-handle=3148 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=A97A323A5635F543A2F6D2EB8733001E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=A97A323A5635F543A2F6D2EB8733001E --renderer-client-id=7 --mojo-platform-channel-handle=3404 /prefetch:1
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:InQEPHrk002+1ARN.1
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe" --launcher=TaskScheduler
"C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe"
wmiadap.exe /F /T /R
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=E27A6119E20BC12D4F08ABE7CED12AF5 --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=E27A6119E20BC12D4F08ABE7CED12AF5 --renderer-client-id=24 --mojo-platform-channel-handle=7332 /prefetch:1
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=2B8C1AF66106A7A67F0491DBEF06F8D0 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=2B8C1AF66106A7A67F0491DBEF06F8D0 --renderer-client-id=25 --mojo-platform-channel-handle=7640 /prefetch:1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s wisvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=3774746B74B0F04CFB03381C8EE4DB91 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=3774746B74B0F04CFB03381C8EE4DB91 --renderer-client-id=27 --mojo-platform-channel-handle=8112 /prefetch:1
taskhostw.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
"C:\Program Files\NVIDIA Corporation\Drs\dbInstaller.exe" -update C:\Users\Václav\AppData\Local\NVIDIA Corporation\NvProfileUpdater\drs\update.dat
taskhostw.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{133EAC4F-5891-4D04-BADA-D84870380A80}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1548,8301976405525918489,11886252426824150335,131072 --service-pipe-token=B95570F0967E5B7C5995E1F95F1C905B --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=B95570F0967E5B7C5995E1F95F1C905B --renderer-client-id=29 --mojo-platform-channel-handle=8220 /prefetch:1
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Václav\Downloads\RSITx64.exe"
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-03-13 214208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-03-21 551520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-03-13 2888896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-21 212576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-03-13 151232]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-03-13 1955528]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]
"TCrdMain"=C:\Program Files\Toshiba\System Setting\TCrdMain_Win8.exe [2015-10-09 559920]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2017-05-03 1893496]
"CsrHCRPServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [2012-03-22 1134288]
"CsrAudioguiCtrl"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [2012-03-22 511696]
"CsrSyncMLServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [2012-03-22 244944]
"vksts"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [2012-03-22 25792]
"HarmonyUserStartup"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [2012-03-22 39128]
"CSRHarmonySkypePlugin"=C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [2012-03-22 146656]
"TrayApplication"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [2012-03-22 529616]
"AdobeGCInvoker-1.0"=C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05 315880]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Václav\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-11-06 1685704]
"Steam"=D:\Programy\Steam\steam.exe [2017-12-15 3111712]
"Bloody2"=C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe [2017-04-14 19405824]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]
"Spotify"=C:\Users\Václav\AppData\Roaming\Spotify\Spotify.exe [2018-01-25 21099408]
"5KPlayer"=C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe [2017-08-03 26735424]
"Spotify Web Helper"=C:\Users\Václav\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018-01-25 780688]
"Discord"=C:\Users\Václav\AppData\Local\Discord\app-0.0.300\Discord.exe [2018-01-08 57821176]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2015-12-10 493568]
"Cisco AnyConnect Secure Mobility Agent for Windows"=c:\program files (x86)\cisco\cisco anyconnect secure mobility client\vpnui.exe [2016-02-29 766464]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
"PSUAMain"=C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [2017-02-22 141760]
"PWRISOVM.EXE"=D:\Programy\PowerISO\PWRISOVM.EXE [2016-05-25 406664]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2014-06-16 139776]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2014-05-22 4513792]
"BrHelp"=C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [2013-03-07 1944576]
"IncrediBuild Agent Monitor"=C:\Program Files (x86)\Xoreax\IncrediBuild\BuildTrayIcon.exe [2017-08-28 189920]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Avid Application Manager.lnk - C:\WINDOWS\Installer\{99E377DB-D2D0-44A5-8533-AA8BE1381644}\NewShortcut1_E1E0FF1FC1474601A40EFEF248F11D43.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
IVTCredentialProvider
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"MaxGPOScriptWait"=600
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.dvacm_vspx7"=d:\Programy\Corel VideoStudio Pro X7\Dvacm.acm
"VIDC.FPS1"=frapsv64.dll
"VIDC.LAGS"=lagarith.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "D:\Programy\PSPad editor\PSPad.exe" "%1"
======List of files/folders created in the last 1 month======
2018-03-14 10:59:49 ----D---- C:\rsit
2018-03-14 10:17:45 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-03-14 10:17:41 ----A---- C:\WINDOWS\system32\drivers\mbae64.sys
2018-03-14 10:17:31 ----D---- C:\Program Files\Malwarebytes
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\SYSWOW64\AcSpecfc.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-03-13 23:45:34 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-03-13 23:45:33 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-03-13 23:45:32 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-03-13 23:45:32 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-03-13 23:45:31 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-03-13 23:45:31 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-03-13 23:45:31 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2018-03-13 23:45:31 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\samsrv.dll
2018-03-13 23:45:30 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2018-03-13 23:45:29 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-03-13 23:45:29 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-03-13 23:45:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-03-13 23:45:27 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-03-13 23:45:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-03-13 23:45:26 ----A---- C:\WINDOWS\system32\jscript.dll
2018-03-13 23:45:25 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-03-13 23:45:25 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-03-13 23:45:24 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-03-13 23:45:23 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-03-13 23:45:23 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-03-13 23:45:22 ----A---- C:\WINDOWS\system32\wininet.dll
2018-03-13 23:45:22 ----A---- C:\WINDOWS\system32\AcSpecfc.dll
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\msIso.dll
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-03-13 23:45:21 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2018-03-13 23:45:20 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-03-13 23:45:19 ----A---- C:\WINDOWS\system32\winmde.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-03-13 23:45:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-03-13 23:45:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\generaltel.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\appraiser.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\aeinv.dll
2018-03-13 23:45:16 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\usocore.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-03-13 23:45:15 ----A---- C:\WINDOWS\system32\cdp.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\MusNotification.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\devinv.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2018-03-13 23:45:14 ----A---- C:\WINDOWS\system32\aepic.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\pcasvc.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\invagent.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-03-13 23:45:13 ----A---- C:\WINDOWS\system32\aitstatic.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Payments.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\SYSWOW64\AuthFWSnapin.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\Windows.Payments.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\msra.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\msi.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\DbgModel.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2018-03-13 23:45:12 ----A---- C:\WINDOWS\system32\AuthFWSnapin.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\msisip.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountWAMExtension.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\IndexedDbLegacy.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\zipfldr.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\winsrv.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\UsoClient.exe
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\updatecsp.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\svf.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\SpectrumSyncClient.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\pcalua.exe
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\offlinesam.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\msisip.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\IndexedDbLegacy.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\wcnfs.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys
2018-03-13 23:45:11 ----A---- C:\WINDOWS\system32\credssp.dll
2018-03-13 17:51:36 ----D---- C:\Program Files\Microsoft Office 15
2018-03-13 16:21:48 ----SHD---- C:\Config.Msi
2018-03-13 16:17:34 ----D---- C:\Users\Václav\AppData\Roaming\dvdcss
2018-03-13 13:29:29 ----D---- C:\WINDOWS\system32\drivers\wd
2018-03-10 21:40:43 ----D---- C:\Users\Václav\AppData\Roaming\discord
2018-03-10 05:07:05 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-03-08 18:51:33 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2018-03-08 18:51:32 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-03-08 18:51:32 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-03-08 18:51:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-03-08 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2018-03-08 18:51:25 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2018-03-08 18:51:22 ----A---- C:\WINDOWS\system32\actxprxy.dll
2018-03-08 18:51:21 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-03-08 18:51:19 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-03-08 18:51:18 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2018-03-08 18:51:17 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\hal.dll
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-03-08 18:51:16 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\storufs.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2018-03-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-03-08 18:51:14 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2018-03-08 18:51:14 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-03-08 18:51:11 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\evr.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-03-08 18:51:10 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-03-08 18:51:09 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2018-03-08 18:51:08 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-03-08 18:51:05 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-03-08 18:51:01 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-03-08 18:51:00 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-03-08 18:50:59 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\winhttp.dll
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2018-03-08 18:50:58 ----A---- C:\WINDOWS\system32\dnsapi.dll
2018-03-08 18:50:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-03-08 18:50:57 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2018-03-08 18:50:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-03-08 18:50:55 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2018-03-08 18:50:55 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\schedsvc.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\services.exe
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2018-03-08 18:50:54 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-03-08 18:50:53 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-03-08 18:50:52 ----A---- C:\WINDOWS\system32\wlansec.dll
2018-03-08 18:50:51 ----A---- C:\WINDOWS\system32\wwansvc.dll
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\wmp.dll
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-03-08 18:50:45 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-03-08 18:50:44 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-03-08 18:50:43 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-03-08 18:50:43 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\wuauclt.exe
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\ISM.dll
2018-03-08 18:50:40 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2018-03-08 18:50:39 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-03-08 18:50:38 ----A---- C:\WINDOWS\system32\StartTileData.dll
2018-03-08 18:50:38 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-03-08 18:50:37 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2018-03-08 18:50:36 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2018-03-08 18:50:35 ----A---- C:\WINDOWS\system32\comdlg32.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\wow64.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\twinui.dll
2018-03-08 18:50:34 ----A---- C:\WINDOWS\system32\sspicli.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\system32\LogonController.dll
2018-03-08 18:50:33 ----A---- C:\WINDOWS\explorer.exe
2018-03-08 18:50:32 ----A---- C:\WINDOWS\system32\shell32.dll
2018-03-08 18:50:30 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-03-08 18:50:24 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2018-03-08 18:50:23 ----A---- C:\WINDOWS\system32\vac.exe
2018-03-08 18:50:16 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\SRH.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-03-08 18:50:16 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-03-08 18:50:15 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-03-08 18:50:14 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-03-08 18:50:14 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-03-08 18:50:10 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-03-08 18:50:10 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-03-08 18:50:09 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2018-03-08 18:50:05 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\sppobjs.dll
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\runexehelper.exe
2018-03-08 18:50:05 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-03-08 18:50:04 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-03-08 18:50:03 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2018-03-08 18:50:02 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-03-08 18:50:02 ----A---- C:\WINDOWS\system32\ci.dll
2018-03-08 18:50:01 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-03-08 18:50:01 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\usercpl.dll
2018-03-08 18:50:00 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\winload.exe
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\tquery.dll
2018-03-08 18:49:59 ----A---- C:\WINDOWS\system32\mssrch.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-03-08 18:49:58 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-03-08 18:49:57 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provtool.exe
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provhandlers.dll
2018-03-08 18:49:56 ----A---- C:\WINDOWS\system32\provengine.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\SYSWOW64\StateRepository.Core.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2018-03-08 18:49:55 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\Wpc.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\UserDataService.dll
2018-03-08 18:49:54 ----A---- C:\WINDOWS\system32\sppwinob.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2018-03-08 18:49:53 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-03-08 18:49:52 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2018-03-08 18:49:52 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\winlogon.exe
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\mf.dll
2018-03-08 18:49:51 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-03-08 18:49:50 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\wpncore.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\mmc.exe
2018-03-08 18:49:49 ----A---- C:\WINDOWS\system32\InputService.dll
2018-03-08 18:49:48 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-03-08 18:49:48 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\VSSVC.exe
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\usermgr.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\rtmpal.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\ole32.dll
2018-03-08 18:49:47 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-03-08 18:49:46 ----A---- C:\WINDOWS\system32\WpcMon.exe
2018-03-08 18:49:46 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-03-08 18:49:45 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2018-03-08 18:49:45 ----A---- C:\WINDOWS\system32\FntCache.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\Unistore.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\sysmain.dll
2018-03-08 18:49:44 ----A---- C:\WINDOWS\system32\ieui.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\wlansvc.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\inetcomm.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-03-08 18:49:43 ----A---- C:\WINDOWS\system32\atmfd.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\wifitask.exe
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\SEMgrSvc.dll
2018-03-08 18:49:42 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\msvcp_win.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\EncDec.dll
2018-03-08 18:49:41 ----A---- C:\WINDOWS\system32\authui.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\shutdownux.dll
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2018-03-08 18:49:40 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2018-03-08 18:49:39 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2018-03-08 18:49:39 ----A---- C:\WINDOWS\system32\winresume.exe
2018-03-08 18:49:39 ----A---- C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-03-08 18:49:38 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-03-08 18:49:37 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2018-03-08 18:49:37 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-03-08 18:49:37 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\setupapi.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\efswrt.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\efscore.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\APHostService.dll
2018-03-08 18:49:36 ----A---- C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\policymanager.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\localspl.dll
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-03-08 18:49:35 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2018-03-08 18:49:34 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\ncsi.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\mssvp.dll
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-03-08 18:49:34 ----A---- C:\WINDOWS\system32\advapi32.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\EditionUpgradeManagerObj.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\p2psvc.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\lsm.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\container.dll
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2018-03-08 18:49:33 ----A---- C:\WINDOWS\system32\AppLockerCSP.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\SYSWOW64\msvcp_win.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-03-08 18:49:32 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\SyncController.dll
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2018-03-08 18:49:31 ----A---- C:\WINDOWS\system32\NaturalAuth.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\SettingSync.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-03-08 18:49:30 ----A---- C:\WINDOWS\system32\Magnify.exe
2018-03-08 18:49:29 ----A---- C:\WINDOWS\SYSWOW64\d3d11_3SDKLayers.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\winbrand.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\webio.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\vssapi.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\skci.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\P2P.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-03-08 18:49:29 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2018-03-08 18:49:28 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\rastls.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-03-08 18:49:27 ----A---- C:\WINDOWS\system32\mfps.dll
