VIRY.CZ

Dobrý den,

mám problém na laptopu Lenovo V310. Nedávno byla velká aktualizace a od té, když zadám heslo pro přihlášení mi zůstane viset obrazovka viz. obrázek:

https://ibb.co/kC4v2y

Do nouzového režimu se dostanu, ale to je tak vše. Napadlo mě, zda by se nemohlo jednat o jakýsi virus. Log přikládám, byl vytvořen v nouzovém režimu.

Děkuji za rady.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ilona at 2018-06-21 13:42:58
Microsoft Windows 10 Pro
System drive C: has 11 GB (13%) free of 82 GB
Total RAM: 3380 MB (55% free)

HijackThis download failed

======Listing Processes======









C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k NetworkService -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p

sihost.exe
C:\WINDOWS\system32\svchost.exe -k appmodel -p
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"ctfmon.exe"
C:\Windows\helppane.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"G:\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

=========Mozilla firefox=========

ProfilePath - C:\Users\Ilona\AppData\Roaming\Mozilla\Firefox\Profiles\f1576k7k.default-1489320477230

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=5.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.151.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709]
"Description"=6.0.12.709
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsJSRealPlayerPlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nprpjplug.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-19 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-19 187968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2010-04-05 1691192]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-04 196648]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-04 483880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2016-12-26 791848]
"OneKeyOptimizer"=C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe [2015-06-19 604968]
"Windows Mobile Device Center"=C:\WINDOWS\WindowsMobile\wmdc.exe [2007-05-31 660360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-03-25 16473344]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"DAX2_APP"=C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [2016-02-04 736768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2018-04-12 20488312]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"HP Officejet Pro 8600 (NET)"=C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2011-09-09 2676584]
"Akamai NetSession Interface"=C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe [2018-04-17 4586456]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2014-11-19 420208]
"OneDrive"=C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-04-30 1624224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WAB Migrate"=C:\Program Files\Windows Mail\wab.exe [2018-04-12 518144]
"Application Restart #0"=C:\Windows\HelpPane.exe [2018-04-12 1054720]
"Application Restart #1"=C:\Windows\System32\Narrator.exe [2018-04-12 349696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray64.exe [2010-03-17 487424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PDFCreator.lnk]
C:\Program Files (x86)\PDFCreator\PDFCreator.exe [2007-12-24 2641920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-03-01 256056]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-03-24 49208]
"Lenovo Smart Fingerprint"=C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-09-25 1761208]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2014-11-19 55664]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu LT.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe

C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk - C:\WINDOWS\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"vidc.mjpg"=pvmjpgx40.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - "C:\Program Files (x86)\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2018-06-21 13:42:58 ----D---- C:\rsit
2018-06-21 13:42:58 ----D---- C:\Program Files\trend micro
2018-06-18 19:35:22 ----SH---- C:\bootTel.dat
2018-06-18 18:50:12 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2018-06-18 18:50:11 ----D---- C:\Drivers
2018-06-18 18:11:31 ----ASH---- C:\pagefile.sys
2018-06-14 14:03:51 ----A---- C:\WINDOWS\ntbtlog.txt
2018-06-13 21:01:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-06-13 21:01:11 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-06-13 21:01:09 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-06-13 21:01:06 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\cdp.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\OpcServices.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\combase.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\CoreShell.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\wininet.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\d2d1.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\usocore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mf.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\msftedit.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\jscript.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ISM.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\dxgi.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\propsys.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\dui70.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WinTypes.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\winload.exe
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\webservices.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\SHCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfds.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\esent.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ci.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\winresume.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ReAgent.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\pwcreator.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\msdtctm.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\credprovs.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\skci.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\DXP.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfps.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\GenValObj.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\uefi.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FlightSettings.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mstsc.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\Ucx01000.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\ClipUp.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVTerminator.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVClientPS.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msdt.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpshell.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpinit.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MDEServer.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\easwrt.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\SIHClient.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\msdt.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\mqsnap.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\edpnotify.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\dssvc.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BFE.DLL
2018-06-13 19:20:51 ----D---- C:\Program Files\Common Files\SpeechEngines
2018-06-13 19:20:27 ----AS---- C:\WINDOWS\bootstat.dat
2018-06-13 19:19:34 ----D---- C:\WINDOWS\system32\Microsoft
2018-06-13 19:19:34 ----D---- C:\WINDOWS\ServiceProfiles
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\srms-apr.dat
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\hvsicontainerservice.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-06-13 19:17:34 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\srms-apr.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\shell32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasplap.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\PhoneService.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\credssp.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wpnapps.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tquery.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rmclient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\GamePanel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\aadtb.dll
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\msmq
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\BestPractices
2018-06-13 19:15:20 ----D---- C:\inetpub
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-06-13 19:14:27 ----D---- C:\Program Files\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files\MSBuild
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\MSBuild
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:14:07 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\prm0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2018-06-13 18:33:19 ----ASH---- C:\hiberfil.sys
2018-06-13 18:31:39 ----SD---- C:\Users\Ilona\AppData\Roaming\Microsoft
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOShared
2018-06-13 18:27:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-13 18:26:43 ----D---- C:\ProgramData\Dolby
2018-06-13 18:26:43 ----D---- C:\Program Files\Dolby
2018-06-13 18:26:23 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-06-13 18:26:07 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-06-13 18:24:33 ----D---- C:\WINDOWS\Prefetch
2018-06-13 18:24:30 ----D---- C:\WINDOWS\system32\SleepStudy
2018-06-13 18:24:30 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-13 18:24:29 ----ASH---- C:\swapfile.sys
2018-06-04 13:10:15 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-06-21 13:42:58 ----RD---- C:\Program Files
2018-06-21 13:41:08 ----D---- C:\WINDOWS\Temp
2018-06-21 13:41:08 ----D---- C:\WINDOWS\Tasks
2018-06-21 13:40:07 ----D---- C:\WINDOWS\system32\sru
2018-06-21 13:40:03 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-20 17:57:30 ----D---- C:\WINDOWS\System32
2018-06-20 17:57:30 ----D---- C:\WINDOWS\INF
2018-06-20 17:50:45 ----RSD---- C:\WINDOWS\assembly
2018-06-20 17:50:44 ----D---- C:\Windows
2018-06-20 17:29:37 ----HD---- C:\Program Files\WindowsApps
2018-06-20 17:26:53 ----D---- C:\WINDOWS\AppReadiness
2018-06-18 20:16:54 ----D---- C:\WINDOWS\Logs
2018-06-18 20:03:37 ----D---- C:\ProgramData\Synaptics
2018-06-18 19:04:01 ----D---- C:\WINDOWS\system32\catroot2
2018-06-18 19:04:01 ----D---- C:\WINDOWS\system32\CatRoot
2018-06-18 18:50:36 ----D---- C:\WINDOWS\system32\drivers
2018-06-18 18:50:33 ----D---- C:\WINDOWS\system32\DriverStore
2018-06-18 18:48:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-06-18 18:01:16 ----D---- C:\WINDOWS\system32\config
2018-06-18 17:13:27 ----D---- C:\WINDOWS\WinSxS
2018-06-18 17:11:32 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-18 11:15:32 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-14 18:58:22 ----D---- C:\WINDOWS\SysWOW64
2018-06-14 18:57:29 ----D---- C:\Intel
2018-06-14 13:57:34 ----D---- C:\WINDOWS\system32\WDI
2018-06-14 08:19:30 ----D---- C:\WINDOWS\appcompat
2018-06-13 23:15:32 ----D---- C:\WINDOWS\TextInput
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\oobe
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-06-13 23:15:32 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-06-13 23:15:31 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\zu-ZA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\yo-NG
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\xh-ZA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\wo-SN
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\tn-ZA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\ti-ET
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\rw-RW
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\oobe
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\nso-ZA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\migration
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\ig-NG
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\en-US
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\Dism
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\Boot
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-06-13 23:15:31 ----D---- C:\WINDOWS\system32\appraiser
2018-06-13 23:15:31 ----D---- C:\WINDOWS\ShellExperiences
2018-06-13 23:15:31 ----D---- C:\WINDOWS\bcastdvr
2018-06-13 23:15:31 ----D---- C:\WINDOWS\apppatch
2018-06-13 23:15:31 ----D---- C:\Program Files\Windows Photo Viewer
2018-06-13 23:15:31 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-06-13 21:02:56 ----D---- C:\WINDOWS\CbsTemp
2018-06-13 19:24:11 ----RSD---- C:\WINDOWS\Fonts
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\IME
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-TW
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-HK
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-CN
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\tr-TR
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\th-TH
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\sv-SE
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\SPReview
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\spool
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\drivers\etc
2018-06-13 19:24:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sl-SI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sk-SK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ru-RU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ro-RO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-PT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-BR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pl-PL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\OEM
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nl-NL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\NDF
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nb-NO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\MRT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lv-LV
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lt-LT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ko-KR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ja-jp
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\it-IT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\IME
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ihvmanager
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hu-HU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hr-HR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\he-IL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fr-FR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fi-FI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\EventProviders
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\et-EE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\es-ES
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\el-GR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\de-DE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\da-DK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\cs-CZ
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\bg-BG
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ar-SA
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\appmgmt
2018-06-13 19:24:10 ----D---- C:\WINDOWS\schemas
2018-06-13 19:24:10 ----D---- C:\WINDOWS\ShellNew
2018-06-13 19:24:09 ----SHD---- C:\Program Files\Windows Sidebar
2018-06-13 19:24:09 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2018-06-13 19:24:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2018-06-13 19:24:09 ----RD---- C:\Program Files (x86)
2018-06-13 19:24:09 ----HD---- C:\WINDOWS\system32\GroupPolicy
2018-06-13 19:24:09 ----D---- C:\WINDOWS\system32\Recovery
2018-06-13 19:24:09 ----D---- C:\WINDOWS\Help
2018-06-13 19:24:09 ----D---- C:\Program Files\Intel
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\system
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\microsoft shared
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Common Files
2018-06-13 19:24:04 ----D---- C:\WINDOWS\Setup
2018-06-13 19:20:55 ----D---- C:\WINDOWS\ehome
2018-06-13 19:20:52 ----D---- C:\Program Files (x86)\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Synaptics
2018-06-13 19:20:51 ----D---- C:\Program Files\Realtek
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-06-13 19:18:22 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\vi-VN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ur-PK
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ug-CN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\tt-RU
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\tk-TM
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\te-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ta-in
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\sw-KE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\sq-AL
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\si-lk
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\setup
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\quz-PE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\prs-AF
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\pa-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\or-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\nn-NO
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ne-NP
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\mt-MT
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ms-MY
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\mr-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\mn-MN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ml-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\mk-MK
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\mi-NZ
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\lo-LA
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\lb-LU
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ky-KG
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\kok-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\kn-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\km-KH
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\kk-KZ
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ka-GE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\is-IS
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\id-ID
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\hy-AM
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\gu-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\gd-GB
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\ga-IE
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\fil-PH
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\fa-IR
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\cy-GB
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\bn-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\bn-BD
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\be-BY
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\as-IN
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\am-et
2018-06-13 19:18:22 ----D---- C:\WINDOWS\system32\af-ZA
2018-06-13 19:18:22 ----D---- C:\WINDOWS\Provisioning
2018-06-13 19:18:22 ----D---- C:\WINDOWS\Containers
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\inetsrv
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\en-GB
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-06-13 19:14:28 ----D---- C:\WINDOWS\system32\MUI
2018-06-13 19:13:59 ----D---- C:\WINDOWS\OCR
2018-06-13 18:44:15 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-06-13 18:37:13 ----D---- C:\WINDOWS\SoftwareDistribution
2018-06-13 18:37:13 ----D---- C:\Program Files\windows nt
2018-06-13 18:37:11 ----RD---- C:\Program Files\Windows Defender
2018-06-13 18:37:11 ----D---- C:\WINDOWS\system32\Tasks
2018-06-13 18:37:00 ----D---- C:\WINDOWS\Registration
2018-06-13 18:36:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-06-13 18:34:56 ----D---- C:\WINDOWS\system32\wbem
2018-06-13 18:34:54 ----SD---- C:\ProgramData\Microsoft
2018-06-13 18:34:50 ----RSD---- C:\WINDOWS\media
2018-06-13 18:31:39 ----RD---- C:\Users
2018-06-13 18:27:53 ----HD---- C:\ProgramData
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOPrivate
2018-06-13 18:27:04 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-06-13 18:26:54 ----D---- C:\WINDOWS\SYSWOW64\sda
2018-06-13 18:26:45 ----SHDC---- C:\WINDOWS\Installer
2018-06-13 18:26:45 ----HD---- C:\Config.Msi
2018-06-13 18:26:43 ----D---- C:\WINDOWS\system32\DAX2
2018-06-13 18:26:31 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-06-13 18:26:02 ----D---- C:\WINDOWS\debug
2018-06-13 18:25:53 ----D---- C:\WINDOWS\twain_32
2018-06-13 18:25:53 ----D---- C:\Program Files (x86)\Lenovo EasyCamera
2018-06-13 18:24:55 ----SHD---- C:\Recovery
2018-06-13 17:52:57 ----D---- C:\Users\Ilona\AppData\Roaming\Skype
2018-06-13 17:31:57 ----D---- C:\ProgramData\Lenovo
2018-06-13 11:24:14 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 11:24:11 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-06-12 09:28:31 ----D---- C:\ProgramData\Package Cache
2018-06-12 09:28:31 ----D---- C:\Program Files (x86)\Garmin
2018-06-06 12:23:11 ----D---- C:\WKOKES
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-05-31 15:30:42 ----D---- C:\WINDOWS\system32\drivers\wd

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-10-22 72808]
R0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
R0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
R0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
R0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
R0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
R0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
R0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
R0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
R0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
R0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R3 ACPIVPC;@oem53.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2016-12-26 35576]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 HpqKbFiltr;@oem38.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2010-02-16 25912]
R3 ICCWDT;@oem21.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2016-11-02 38680]
R3 MarvinBus;@oem8.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-24 261120]
R3 MEIx64;@oem71.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-04 185896]
R3 rt640x64;@oem62.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-08-21 1009128]
R3 RTSUER;@oem61.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-12-22 413912]
S0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
S1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
S1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
S1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
S2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
S2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2016-06-26 610656]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igdkmd64.sys [2016-12-21 11039712]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-03-25 4874496]
S3 IntcDAud;@oem15.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-10-07 822248]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 Qcamain10x64;@netathr10x.inf,%ATHR.Service.DispName%;Qualcomm Extensible Wireless LAN 11AC device driver; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2018-04-12 2344448]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-06-08 945568]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 RTL8167;@oem78.inf,%rtl8167.Service.DispName%;Realtek 8167 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt64win7.sys [2016-01-22 1026304]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 semav6msr64;semav6msr64; \??\C:\windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-04 277032]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
S2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\AdminService.exe [2016-06-26 355760]
S2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc_27bd3;Uživatelská služba platformy připojených zařízení_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 DAX2API;Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [2016-01-27 163328]
S2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 FastbootService;FastbootService; C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe [2015-10-22 193640]
S2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2018-06-06 1194512]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 hasplms;Sentinel LDK License Manager; C:\WINDOWS\system32\hasplms.exe [2015-09-23 4665168]
S2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2010-04-05 103992]
S2 HPDayStarterService;HP DayStarter Service; c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe [2010-06-14 90112]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service; c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2009-12-10 251448]
S2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-03-01 264248]
S2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igfxCUIService.exe [2016-12-21 341984]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-03-16 209184]
S2 Lenovo OKO Service;Lenovo OKO Service; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe [2016-01-07 2730280]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-02-22 73728]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-03-16 416544]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
S2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
S2 OKOControlSvc;OKOControlSvc; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe [2016-01-07 369960]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc_27bd3;Hostitel synchronizace_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2013-11-11 77944]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_27bd3;Uživatelská služba pro GameDVR a vysílání her_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_27bd3;Služba pro podporu uživatelů Bluetooth_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_27bd3;CaptureService_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\IntelCpHeciSvc.exe [2016-12-21 301536]
S3 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\IntelCpHDCPSvc.exe [2016-12-21 480224]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_27bd3;DevicePicker_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_27bd3;Tok zařízení_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-02-14 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-02-19 974632]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2016-06-02 273232]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_27bd3;Služba zasílání zpráv_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-02-17 194000]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_27bd3;Data kontaktů_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_27bd3;PrintWorkflow_27bd3; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-11 269504]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-06-13 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-13 194032]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]

-----------------EOF-----------------

Zdravím!
Problém je možná v samotné aktualizaci (nesedla si s něčím, co mát v PC nainstalováno. Pokud je přiložený log RSIT z nouz. režimu, je mi celkem na nic. Spusťte proto kompletní sken MBAM: http://www.malwarebytes.org/mbam.php (v nouz. režimu) a djte log. Předem nic nemažte.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 21.06.18
Čas skenování: 15:02
Logovací soubor: 5c528de8-7553-11e8-9b46-54ab3ae21ec9.json
Správce: Ano

-Informace o softwaru-
Verze: 3.5.1.2522
Verze komponentů: 1.0.374
Aktualizovat verzi balíku komponent: 1.0.5552
Licence: Bezplatný

-Systémová informace-
OS: Windows 10 (Build 17134.112)
CPU: x64
Systém souborů: NTFS
Uživatel: Ilona-HP\Ilona

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 332446
Zjištěné hrozby: 4
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 1 min, 49 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 2
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, Žádná uživatelská akce, [709], [186876],1.0.5552
PUP.Optional.ASK, HKU\S-1-5-21-3823873606-208965420-2629628224-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C2FEAFDC-5679-4B56-BD3C-43D4D2471C2C}, Žádná uživatelská akce, [2], [258454],1.0.5552

Hodnota v registru: 1
PUP.Optional.ASK, HKU\S-1-5-21-3823873606-208965420-2629628224-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C2FEAFDC-5679-4B56-BD3C-43D4D2471C2C}|URL, Žádná uživatelská akce, [2], [258454],1.0.5552

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 1
PUP.Optional.APNToolBar.Gen, C:\PROGRAMDATA\APN\APN-STUB, Žádná uživatelská akce, [709], [175062],1.0.5552

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Smažte všechny nálezy, restartujte a zkuste nastartovat do plného režimu. Pokud se vám to podaří, dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

Smazáno. Nicméně se do Windows nedostanu pořád stejný problém. Mám pocit, že to bude těma aktualizacemi než viry. Ale v nouzovém režimu je nemohu odinstalovat (nepustí mě). A pokud bych chtěl dát aktualizace, tak mě zase nepustí nouzák na internet. A to ho mám spuštěný s podporou sítě.

Zkuste obnovu systému k datu, kdy korketně fungoval, případně návrat do tov. nastavení se zachováním vašich souborů.

Povedlo se mě dostat do Windows pomocí funkce předčítání, nyní prosím o kontrolu logu:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ilona at 2018-06-21 21:57:32
Microsoft Windows 10 Pro
System drive C: has 13 GB (16%) free of 82 GB
Total RAM: 3380 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:57, on 21.6.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\Ilona.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Lenovo Smart Fingerprint] "C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN23JBT1C905KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe (User 'Default user')
O4 - Startup: Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk = ?
O4 - Global Startup: Akcelerátor spuštění AutoCADu LT.lnk = C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF0E50EB-3868-45B0-8FFB-EFCF60AF0B83}: NameServer = 192.168.110.1
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Dolby DAX2 API Service (DAX2API) - Unknown owner - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: FastbootService - Lenovo - C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel LDK License Manager (hasplms) - Unknown owner - C:\WINDOWS\system32\hasplms.exe (file missing)
O23 - Service: HP Power Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP DayStarter Service (HPDayStarterService) - Hewlett-Packard Company - c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo OKO Service - Lenovo(beijing) Limited - C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: OKOControlSvc - Lenovo(beijing) Limited - C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @oem77.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem77.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 15147 bytes

======Listing Processes======








winlogon.exe

C:\WINDOWS\system32\lsass.exe
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d0184e75-8438-4ec0-9098-0669267ab718 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-60278956-5cca-4101-8faf-a3a287866fb7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-df5e84ea-16fc-4c23-87f9-8f41335bed8b -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d5bf8862-2141-43a8-a354-a9e653af4197 -LifetimeId:d21c291f-dc79-4e46-b96d-157000249896 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p
C:\WINDOWS\system32\svchost.exe -k appmodel -p
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\spoolsv.exe

"C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe"
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
C:\WINDOWS\system32\AdminService.exe
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe" EXPRESS
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
C:\WINDOWS\system32\hasplms.exe -run
"C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe"
"c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe"
"c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe"

C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\valWbioSyncSvc.exe
C:\windows\system32\vcsFPService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
C:\WINDOWS\System32\svchost.exe -k netsvcs
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\Program Files\Synaptics\SynFp\Shared\SensorDBSynch.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\WINDOWS\system32\AUDIODG.EXE 0x42c
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files\Lenovo\LenovoUtility\utility.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe" /run
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OnekeyOptimizerUpdata.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe" -Hide
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN23JBT1C905KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\WINDOWS\system32\RunDll32.exe" "C:\Program Files\HP\HP Officejet Pro 8600\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN23JBT1C905KC;CONNECTION=NW;MONITOR=1;
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizer.exe" /hide
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
{62086CB8-1E5C-4B2A-B37B-20D3A9B86DF1}
{1D7B4852-5E26-4E5E-8837-A15206016F04}
{D5D29B41-BB51-4E94-A806-63CC9A5076C1}
wmiadap.exe /F /T /R
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d74465da-b099-4fe8-a06a-7ffe693e0a72 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7366e4c7-242a-46fe-a37f-0e2c56716a6f -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-6bfdc1f9-1b24-4c30-8a4a-c71ba96165cb -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0e19675e-fd58-43ad-b59b-d59641168524 -LifetimeId:f49a78f4-b4a1-41f7-89cd-f099d95b485d -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe" -Embedding
"C:\totalcmd\TOTALCMD.EXE"
"C:\Users\Ilona\Desktop\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 820 824 832 8192 828

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

=========Mozilla firefox=========

ProfilePath - C:\Users\Ilona\AppData\Roaming\Mozilla\Firefox\Profiles\f1576k7k.default-1489320477230

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=5.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.151.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709]
"Description"=6.0.12.709
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsJSRealPlayerPlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nprpjplug.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-19 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-19 187968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2010-04-05 1691192]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-04 196648]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-04 483880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2016-12-26 791848]
"OneKeyOptimizer"=C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe [2015-06-19 604968]
"Windows Mobile Device Center"=C:\WINDOWS\WindowsMobile\wmdc.exe [2007-05-31 660360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-03-25 16473344]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"DAX2_APP"=C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [2016-02-04 736768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"HP Officejet Pro 8600 (NET)"=C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2011-09-09 2676584]
"Akamai NetSession Interface"=C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2014-11-19 420208]
"OneDrive"=C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-04-30 1624224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray64.exe [2010-03-17 487424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PDFCreator.lnk]
C:\Program Files (x86)\PDFCreator\PDFCreator.exe [2007-12-24 2641920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-03-01 256056]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-03-24 49208]
"Lenovo Smart Fingerprint"=C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-09-25 1761208]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2014-11-19 55664]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu LT.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe

C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk - C:\WINDOWS\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"vidc.mjpg"=pvmjpgx40.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - "C:\Program Files (x86)\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2018-06-21 17:05:34 ----D---- C:\ProgramData\Microsoft OneDrive
2018-06-21 15:02:11 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-06-21 15:02:05 ----A---- C:\WINDOWS\system32\drivers\mbae64.sys
2018-06-21 15:01:59 ----D---- C:\ProgramData\Malwarebytes
2018-06-21 15:01:59 ----D---- C:\Program Files\Malwarebytes
2018-06-21 13:42:58 ----D---- C:\rsit
2018-06-21 13:42:58 ----D---- C:\Program Files\trend micro
2018-06-18 19:35:22 ----SH---- C:\bootTel.dat
2018-06-18 18:50:12 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2018-06-18 18:50:11 ----D---- C:\Drivers
2018-06-14 14:03:51 ----A---- C:\WINDOWS\ntbtlog.txt
2018-06-13 21:01:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-06-13 21:01:11 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-06-13 21:01:09 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-06-13 21:01:06 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\cdp.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\OpcServices.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\combase.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\CoreShell.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\wininet.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\d2d1.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\usocore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mf.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\msftedit.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\jscript.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ISM.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\dxgi.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\propsys.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\dui70.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WinTypes.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\winload.exe
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\webservices.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\SHCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfds.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\esent.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ci.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\winresume.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ReAgent.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\pwcreator.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\msdtctm.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\credprovs.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\skci.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\DXP.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfps.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\GenValObj.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\uefi.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FlightSettings.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mstsc.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\Ucx01000.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\ClipUp.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVTerminator.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVClientPS.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msdt.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpshell.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpinit.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MDEServer.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\easwrt.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\SIHClient.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\msdt.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\mqsnap.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\edpnotify.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\dssvc.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BFE.DLL
2018-06-13 19:20:51 ----D---- C:\Program Files\Common Files\SpeechEngines
2018-06-13 19:20:27 ----AS---- C:\WINDOWS\bootstat.dat
2018-06-13 19:19:34 ----D---- C:\WINDOWS\system32\Microsoft
2018-06-13 19:19:34 ----D---- C:\WINDOWS\ServiceProfiles
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\srms-apr.dat
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\hvsicontainerservice.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-06-13 19:17:34 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\srms-apr.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\shell32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasplap.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\PhoneService.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\credssp.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wpnapps.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tquery.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rmclient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\GamePanel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\aadtb.dll
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\msmq
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\BestPractices
2018-06-13 19:15:20 ----D---- C:\inetpub
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-06-13 19:14:27 ----D---- C:\Program Files\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files\MSBuild
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\MSBuild
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:14:07 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\prm0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2018-06-13 18:33:19 ----ASH---- C:\hiberfil.sys
2018-06-13 18:31:39 ----SD---- C:\Users\Ilona\AppData\Roaming\Microsoft
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOShared
2018-06-13 18:27:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-13 18:26:43 ----D---- C:\ProgramData\Dolby
2018-06-13 18:26:43 ----D---- C:\Program Files\Dolby
2018-06-13 18:26:23 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-06-13 18:26:07 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-06-13 18:24:33 ----D---- C:\WINDOWS\Prefetch
2018-06-13 18:24:30 ----D---- C:\WINDOWS\system32\SleepStudy
2018-06-13 18:24:30 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-13 18:24:29 ----ASH---- C:\swapfile.sys
2018-06-04 13:10:15 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-06-21 21:57:56 ----D---- C:\WINDOWS\Temp
2018-06-21 21:56:23 ----D---- C:\Users\Ilona\AppData\Roaming\Skype
2018-06-21 21:54:51 ----D---- C:\WINDOWS\system32\sru
2018-06-21 20:53:58 ----D---- C:\ProgramData\Lenovo
2018-06-21 17:53:49 ----D---- C:\WINDOWS\INF
2018-06-21 17:52:59 ----D---- C:\WINDOWS\AppReadiness
2018-06-21 17:52:58 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-21 17:52:52 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-21 17:52:52 ----D---- C:\WINDOWS\WinSxS
2018-06-21 17:52:52 ----D---- C:\WINDOWS\system32\config
2018-06-21 17:51:49 ----D---- C:\WINDOWS\system32\drivers
2018-06-21 17:51:39 ----D---- C:\ProgramData\Synaptics
2018-06-21 17:50:57 ----D---- C:\WINDOWS\system32\catroot2
2018-06-21 17:50:57 ----D---- C:\WINDOWS\system32\CatRoot
2018-06-21 17:50:10 ----D---- C:\WINDOWS\TextInput
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\oobe
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SysWOW64
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\zu-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\yo-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\xh-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\wo-SN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\vi-VN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ur-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ug-CN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tt-RU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tn-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tk-TM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ti-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\te-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ta-in
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sw-KE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sq-AL
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\si-lk
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\setup
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\rw-RW
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\quz-PE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\prs-AF
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\pa-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\or-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\oobe
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\nso-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\nn-NO
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ne-NP
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mt-MT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ms-MY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mr-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mn-MN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ml-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mk-MK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mi-NZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\migration
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\lo-LA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\lb-LU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ky-KG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kok-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\km-KH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kk-KZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ka-GE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\is-IS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ig-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\id-ID
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\hy-AM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\gu-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\gd-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ga-IE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\fil-PH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\fa-IR
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\en-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\Dism
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\cy-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\cs-CZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\Boot
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bn-BD
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\be-BY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\as-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\appraiser
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\am-et
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\af-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\System32
2018-06-21 17:50:09 ----RSD---- C:\WINDOWS\Fonts
2018-06-21 17:50:09 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-06-21 17:50:09 ----D---- C:\WINDOWS\ShellExperiences
2018-06-21 17:50:09 ----D---- C:\WINDOWS\Provisioning
2018-06-21 17:50:09 ----D---- C:\WINDOWS\bcastdvr
2018-06-21 17:50:09 ----D---- C:\WINDOWS\apppatch
2018-06-21 17:50:09 ----D---- C:\Program Files\Windows Photo Viewer
2018-06-21 17:50:09 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-06-21 17:50:08 ----D---- C:\WINDOWS\Containers
2018-06-21 17:50:07 ----D---- C:\WINDOWS\system32\DriverStore
2018-06-21 17:20:27 ----RSD---- C:\WINDOWS\assembly
2018-06-21 17:13:14 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-21 17:13:14 ----D---- C:\WINDOWS\Logs
2018-06-21 17:06:15 ----HD---- C:\Program Files\WindowsApps
2018-06-21 17:05:34 ----HD---- C:\ProgramData
2018-06-21 17:00:55 ----D---- C:\WINDOWS\CbsTemp
2018-06-21 16:46:11 ----D---- C:\WINDOWS\Tasks
2018-06-21 16:13:57 ----D---- C:\ProgramData\APN
2018-06-21 15:52:29 ----RD---- C:\WINDOWS\PrintDialog
2018-06-21 15:01:59 ----RD---- C:\Program Files
2018-06-20 17:50:44 ----D---- C:\Windows
2018-06-18 18:48:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-06-14 18:57:29 ----D---- C:\Intel
2018-06-14 13:57:34 ----D---- C:\WINDOWS\system32\WDI
2018-06-14 08:19:30 ----D---- C:\WINDOWS\appcompat
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\IME
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-TW
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-HK
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-CN
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\tr-TR
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\th-TH
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\sv-SE
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\SPReview
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\spool
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\drivers\etc
2018-06-13 19:24:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sl-SI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sk-SK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ru-RU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ro-RO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-PT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-BR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pl-PL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\OEM
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nl-NL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\NDF
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nb-NO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\MRT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lv-LV
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lt-LT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ko-KR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ja-jp
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\it-IT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\IME
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ihvmanager
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hu-HU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hr-HR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\he-IL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fr-FR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fi-FI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\EventProviders
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\et-EE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\es-ES
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\el-GR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\de-DE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\da-DK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\bg-BG
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ar-SA
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\appmgmt
2018-06-13 19:24:10 ----D---- C:\WINDOWS\schemas
2018-06-13 19:24:10 ----D---- C:\WINDOWS\ShellNew
2018-06-13 19:24:09 ----SHD---- C:\Program Files\Windows Sidebar
2018-06-13 19:24:09 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2018-06-13 19:24:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2018-06-13 19:24:09 ----RD---- C:\Program Files (x86)
2018-06-13 19:24:09 ----HD---- C:\WINDOWS\system32\GroupPolicy
2018-06-13 19:24:09 ----D---- C:\WINDOWS\system32\Recovery
2018-06-13 19:24:09 ----D---- C:\WINDOWS\Help
2018-06-13 19:24:09 ----D---- C:\Program Files\Intel
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\system
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\microsoft shared
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Common Files
2018-06-13 19:24:04 ----D---- C:\WINDOWS\Setup
2018-06-13 19:20:55 ----D---- C:\WINDOWS\ehome
2018-06-13 19:20:52 ----D---- C:\Program Files (x86)\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Synaptics
2018-06-13 19:20:51 ----D---- C:\Program Files\Realtek
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\inetsrv
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\en-GB
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-06-13 19:14:28 ----D---- C:\WINDOWS\system32\MUI
2018-06-13 19:13:59 ----D---- C:\WINDOWS\OCR
2018-06-13 18:44:15 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-06-13 18:37:13 ----D---- C:\WINDOWS\SoftwareDistribution
2018-06-13 18:37:13 ----D---- C:\Program Files\windows nt
2018-06-13 18:37:11 ----RD---- C:\Program Files\Windows Defender
2018-06-13 18:37:11 ----D---- C:\WINDOWS\system32\Tasks
2018-06-13 18:37:00 ----D---- C:\WINDOWS\Registration
2018-06-13 18:36:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-06-13 18:34:56 ----D---- C:\WINDOWS\system32\wbem
2018-06-13 18:34:54 ----SD---- C:\ProgramData\Microsoft
2018-06-13 18:34:50 ----RSD---- C:\WINDOWS\media
2018-06-13 18:31:39 ----RD---- C:\Users
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOPrivate
2018-06-13 18:27:04 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-06-13 18:26:54 ----D---- C:\WINDOWS\SYSWOW64\sda
2018-06-13 18:26:45 ----SHDC---- C:\WINDOWS\Installer
2018-06-13 18:26:45 ----HD---- C:\Config.Msi
2018-06-13 18:26:43 ----D---- C:\WINDOWS\system32\DAX2
2018-06-13 18:26:31 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-06-13 18:26:02 ----D---- C:\WINDOWS\debug
2018-06-13 18:25:53 ----D---- C:\WINDOWS\twain_32
2018-06-13 18:25:53 ----D---- C:\Program Files (x86)\Lenovo EasyCamera
2018-06-13 18:24:55 ----SHD---- C:\Recovery
2018-06-13 11:24:14 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 11:24:11 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-06-12 09:28:31 ----D---- C:\ProgramData\Package Cache
2018-06-12 09:28:31 ----D---- C:\Program Files (x86)\Garmin
2018-06-06 12:23:11 ----D---- C:\WKOKES
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-05-31 15:30:42 ----D---- C:\WINDOWS\system32\drivers\wd

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-10-22 72808]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
R3 ACPIVPC;@oem53.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2016-12-26 35576]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2016-06-26 610656]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 HpqKbFiltr;@oem38.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2010-02-16 25912]
R3 ICCWDT;@oem21.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igdkmd64.sys [2016-12-21 11039712]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-03-25 4874496]
R3 IntcDAud;@oem15.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-10-07 822248]
R3 MarvinBus;@oem8.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-24 261120]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2018-06-21 253664]
R3 MEIx64;@oem71.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-04 185896]
R3 Qcamain10x64;@netathr10x.inf,%ATHR.Service.DispName%;Qualcomm Extensible Wireless LAN 11AC device driver; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2018-04-12 2344448]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 rt640x64;@oem62.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-08-21 1009128]
R3 RTSUER;@oem61.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-12-22 413912]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 AtiDCM;AtiDCM; \??\C:\Users\Ilona\AppData\Local\Temp\atdcm64a.sys [2016-02-17 33992]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-06-08 945568]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 RTL8167;@oem78.inf,%rtl8167.Service.DispName%;Realtek 8167 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt64win7.sys [2016-01-22 1026304]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 semav6msr64;semav6msr64; \??\C:\windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-04 277032]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\AdminService.exe [2016-06-26 355760]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_80a64;Uživatelská služba platformy připojených zařízení_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DAX2API;Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [2016-01-27 163328]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 FastbootService;FastbootService; C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe [2015-10-22 193640]
R2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2018-06-06 1194512]
R2 hasplms;Sentinel LDK License Manager; C:\WINDOWS\system32\hasplms.exe [2015-09-23 4665168]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2010-04-05 103992]
R2 HPDayStarterService;HP DayStarter Service; c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe [2010-06-14 90112]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2009-12-10 251448]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-03-16 209184]
R2 Lenovo OKO Service;Lenovo OKO Service; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe [2016-01-07 2730280]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-02-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-03-16 416544]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-05-09 6541008]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 OKOControlSvc;OKOControlSvc; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe [2016-01-07 369960]
R2 OneSyncSvc_80a64;Hostitel synchronizace_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-02-14 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-03-01 264248]
S2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igfxCUIService.exe [2016-12-21 341984]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2013-11-11 77944]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_80a64;Uživatelská služba pro GameDVR a vysílání her_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_80a64;Služba pro podporu uživatelů Bluetooth_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_80a64;CaptureService_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_80a64;DevicePicker_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_80a64;Tok zařízení_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-02-19 974632]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2016-06-02 273232]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_80a64;Služba zasílání zpráv_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-02-17 194000]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_80a64;Data kontaktů_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_80a64;PrintWorkflow_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-11 269504]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-06-13 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-13 194032]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]

-----------------EOF-----------------

Povedlo se mě dostat do Windows pomocí funkce předčítání, nyní prosím o kontrolu logu:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ilona at 2018-06-21 21:57:32
Microsoft Windows 10 Pro
System drive C: has 13 GB (16%) free of 82 GB
Total RAM: 3380 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:57, on 21.6.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\Ilona.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Lenovo Smart Fingerprint] "C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN23JBT1C905KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Application Restart #1] C:\Windows\System32\Narrator.exe (User 'Default user')
O4 - Startup: Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk = ?
O4 - Global Startup: Akcelerátor spuštění AutoCADu LT.lnk = C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF0E50EB-3868-45B0-8FFB-EFCF60AF0B83}: NameServer = 192.168.110.1
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Dolby DAX2 API Service (DAX2API) - Unknown owner - C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: FastbootService - Lenovo - C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel LDK License Manager (hasplms) - Unknown owner - C:\WINDOWS\system32\hasplms.exe (file missing)
O23 - Service: HP Power Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP DayStarter Service (HPDayStarterService) - Hewlett-Packard Company - c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo OKO Service - Lenovo(beijing) Limited - C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: OKOControlSvc - Lenovo(beijing) Limited - C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @oem77.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem77.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 15147 bytes

======Listing Processes======








winlogon.exe

C:\WINDOWS\system32\lsass.exe
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d0184e75-8438-4ec0-9098-0669267ab718 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-60278956-5cca-4101-8faf-a3a287866fb7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-df5e84ea-16fc-4c23-87f9-8f41335bed8b -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d5bf8862-2141-43a8-a354-a9e653af4197 -LifetimeId:d21c291f-dc79-4e46-b96d-157000249896 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p
C:\WINDOWS\system32\svchost.exe -k appmodel -p
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\spoolsv.exe

"C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe"
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
C:\WINDOWS\system32\AdminService.exe
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe" EXPRESS
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
C:\WINDOWS\system32\hasplms.exe -run
"C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe"
"c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe"
"c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe"

C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\valWbioSyncSvc.exe
C:\windows\system32\vcsFPService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
C:\WINDOWS\System32\svchost.exe -k netsvcs
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\Program Files\Synaptics\SynFp\Shared\SensorDBSynch.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\WINDOWS\system32\AUDIODG.EXE 0x42c
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files\Lenovo\LenovoUtility\utility.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe" /run
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OnekeyOptimizerUpdata.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe" -Hide
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN23JBT1C905KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\WINDOWS\system32\RunDll32.exe" "C:\Program Files\HP\HP Officejet Pro 8600\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN23JBT1C905KC;CONNECTION=NW;MONITOR=1;
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
"C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizer.exe" /hide
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
{62086CB8-1E5C-4B2A-B37B-20D3A9B86DF1}
{1D7B4852-5E26-4E5E-8837-A15206016F04}
{D5D29B41-BB51-4E94-A806-63CC9A5076C1}
wmiadap.exe /F /T /R
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d74465da-b099-4fe8-a06a-7ffe693e0a72 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7366e4c7-242a-46fe-a37f-0e2c56716a6f -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-6bfdc1f9-1b24-4c30-8a4a-c71ba96165cb -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0e19675e-fd58-43ad-b59b-d59641168524 -LifetimeId:f49a78f4-b4a1-41f7-89cd-f099d95b485d -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe" -Embedding
"C:\totalcmd\TOTALCMD.EXE"
"C:\Users\Ilona\Desktop\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 820 824 832 8192 828

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

=========Mozilla firefox=========

ProfilePath - C:\Users\Ilona\AppData\Roaming\Mozilla\Firefox\Profiles\f1576k7k.default-1489320477230

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=5.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.151.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709]
"Description"=6.0.12.709
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsJSRealPlayerPlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nprpjplug.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-19 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-19 187968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2010-04-05 1691192]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-04 196648]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-04 483880]
"LenovoUtility"=C:\Program Files\Lenovo\LenovoUtility\utility.exe [2016-12-26 791848]
"OneKeyOptimizer"=C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe [2015-06-19 604968]
"Windows Mobile Device Center"=C:\WINDOWS\WindowsMobile\wmdc.exe [2007-05-31 660360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-03-25 16473344]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-03-25 1419008]
"DAX2_APP"=C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [2016-02-04 736768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"HP Officejet Pro 8600 (NET)"=C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2011-09-09 2676584]
"Akamai NetSession Interface"=C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2014-11-19 420208]
"OneDrive"=C:\Users\Ilona\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-04-30 1624224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray64.exe [2010-03-17 487424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PDFCreator.lnk]
C:\Program Files (x86)\PDFCreator\PDFCreator.exe [2007-12-24 2641920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-03-01 256056]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-03-24 49208]
"Lenovo Smart Fingerprint"=C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-09-25 1761208]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2014-11-19 55664]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu LT.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe

C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk - C:\WINDOWS\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"vidc.mjpg"=pvmjpgx40.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - "C:\Program Files (x86)\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2018-06-21 17:05:34 ----D---- C:\ProgramData\Microsoft OneDrive
2018-06-21 15:02:11 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2018-06-21 15:02:05 ----A---- C:\WINDOWS\system32\drivers\mbae64.sys
2018-06-21 15:01:59 ----D---- C:\ProgramData\Malwarebytes
2018-06-21 15:01:59 ----D---- C:\Program Files\Malwarebytes
2018-06-21 13:42:58 ----D---- C:\rsit
2018-06-21 13:42:58 ----D---- C:\Program Files\trend micro
2018-06-18 19:35:22 ----SH---- C:\bootTel.dat
2018-06-18 18:50:12 ----A---- C:\WINDOWS\system32\drivers\rt640x64.sys
2018-06-18 18:50:11 ----D---- C:\Drivers
2018-06-14 14:03:51 ----A---- C:\WINDOWS\ntbtlog.txt
2018-06-13 21:01:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-06-13 21:01:11 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-06-13 21:01:09 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-06-13 21:01:07 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-06-13 21:01:06 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 21:01:05 ----A---- C:\WINDOWS\system32\cdp.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-06-13 21:01:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-06-13 21:01:03 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 21:01:02 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\OpcServices.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 21:01:01 ----A---- C:\WINDOWS\system32\combase.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-06-13 21:01:00 ----A---- C:\WINDOWS\system32\CoreShell.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\wininet.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-06-13 21:00:59 ----A---- C:\WINDOWS\system32\d2d1.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-06-13 21:00:58 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-06-13 21:00:57 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\usocore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 21:00:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\mf.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-06-13 21:00:55 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\msftedit.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\jscript.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\ISM.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\dxgi.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 21:00:54 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\propsys.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-06-13 21:00:53 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\dui70.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-06-13 21:00:52 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\WinTypes.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\winload.exe
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\webservices.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\SHCore.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\mfds.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\esent.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ci.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 21:00:51 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\winresume.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ReAgent.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\pwcreator.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\msdtctm.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\credprovs.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-06-13 21:00:50 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\skci.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\DXP.dll
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-06-13 21:00:49 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfps.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\GenValObj.exe
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\uefi.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2018-06-13 21:00:48 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\FlightSettings.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mstsc.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\mavinject.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\Ucx01000.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\ClipUp.exe
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\bcrypt.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVTerminator.dll
2018-06-13 21:00:47 ----A---- C:\WINDOWS\system32\AppVClientPS.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\msdt.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2018-06-13 21:00:46 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpshell.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\rdpinit.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MDEServer.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\easwrt.dll
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-06-13 21:00:46 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\tbauth.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\SIHClient.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\msdt.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\mqsnap.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\edpnotify.exe
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\dssvc.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 21:00:45 ----A---- C:\WINDOWS\system32\BFE.DLL
2018-06-13 19:20:51 ----D---- C:\Program Files\Common Files\SpeechEngines
2018-06-13 19:20:27 ----AS---- C:\WINDOWS\bootstat.dat
2018-06-13 19:19:34 ----D---- C:\WINDOWS\system32\Microsoft
2018-06-13 19:19:34 ----D---- C:\WINDOWS\ServiceProfiles
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\wmp.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\MSHEIF.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-06-13 19:17:41 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\srms-apr.dat
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\SYSWOW64\hvsicontainerservice.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-06-13 19:17:40 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-06-13 19:17:35 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-06-13 19:17:34 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\srms-apr.dat
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\shell32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasplap.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\PhoneService.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\itss.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\d3d9.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\credssp.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-06-13 19:17:34 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wpnapps.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wevtutil.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wer.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tzres.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\tquery.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rmclient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\msi.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\GamePanel.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17:29 ----A---- C:\WINDOWS\system32\aadtb.dll
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\msmq
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\BestPractices
2018-06-13 19:15:20 ----D---- C:\inetpub
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-06-13 19:14:34 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-06-13 19:14:27 ----D---- C:\Program Files\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files\MSBuild
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-06-13 19:14:27 ----D---- C:\Program Files (x86)\MSBuild
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-06-13 19:14:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:14:07 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-06-13 19:14:06 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\prm0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2018-06-13 19:13:57 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2018-06-13 18:33:19 ----ASH---- C:\hiberfil.sys
2018-06-13 18:31:39 ----SD---- C:\Users\Ilona\AppData\Roaming\Microsoft
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOShared
2018-06-13 18:27:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-13 18:26:43 ----D---- C:\ProgramData\Dolby
2018-06-13 18:26:43 ----D---- C:\Program Files\Dolby
2018-06-13 18:26:23 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-06-13 18:26:07 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-06-13 18:24:33 ----D---- C:\WINDOWS\Prefetch
2018-06-13 18:24:30 ----D---- C:\WINDOWS\system32\SleepStudy
2018-06-13 18:24:30 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-13 18:24:29 ----ASH---- C:\swapfile.sys
2018-06-04 13:10:15 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-06-21 21:57:56 ----D---- C:\WINDOWS\Temp
2018-06-21 21:56:23 ----D---- C:\Users\Ilona\AppData\Roaming\Skype
2018-06-21 21:54:51 ----D---- C:\WINDOWS\system32\sru
2018-06-21 20:53:58 ----D---- C:\ProgramData\Lenovo
2018-06-21 17:53:49 ----D---- C:\WINDOWS\INF
2018-06-21 17:52:59 ----D---- C:\WINDOWS\AppReadiness
2018-06-21 17:52:58 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-21 17:52:52 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-21 17:52:52 ----D---- C:\WINDOWS\WinSxS
2018-06-21 17:52:52 ----D---- C:\WINDOWS\system32\config
2018-06-21 17:51:49 ----D---- C:\WINDOWS\system32\drivers
2018-06-21 17:51:39 ----D---- C:\ProgramData\Synaptics
2018-06-21 17:50:57 ----D---- C:\WINDOWS\system32\catroot2
2018-06-21 17:50:57 ----D---- C:\WINDOWS\system32\CatRoot
2018-06-21 17:50:10 ----D---- C:\WINDOWS\TextInput
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\oobe
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\SysWOW64
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\zu-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\yo-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\xh-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\wo-SN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\vi-VN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ur-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ug-CN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tt-RU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tn-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tk-TM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ti-ET
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\te-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ta-in
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sw-KE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sq-AL
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\si-lk
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\setup
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\rw-RW
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\quz-PE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\prs-AF
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\pa-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\or-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\oobe
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\nso-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\nn-NO
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ne-NP
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mt-MT
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ms-MY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mr-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mn-MN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ml-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mk-MK
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\mi-NZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\migration
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\lo-LA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\lb-LU
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ky-KG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kok-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\km-KH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\kk-KZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ka-GE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\is-IS
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ig-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\id-ID
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\hy-AM
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\gu-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\gd-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ga-IE
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\fil-PH
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\fa-IR
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\en-US
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\Dism
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\cy-GB
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\cs-CZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\Boot
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bn-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\bn-BD
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\be-BY
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\as-IN
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\appraiser
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\am-et
2018-06-21 17:50:10 ----D---- C:\WINDOWS\system32\af-ZA
2018-06-21 17:50:10 ----D---- C:\WINDOWS\System32
2018-06-21 17:50:09 ----RSD---- C:\WINDOWS\Fonts
2018-06-21 17:50:09 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-06-21 17:50:09 ----D---- C:\WINDOWS\ShellExperiences
2018-06-21 17:50:09 ----D---- C:\WINDOWS\Provisioning
2018-06-21 17:50:09 ----D---- C:\WINDOWS\bcastdvr
2018-06-21 17:50:09 ----D---- C:\WINDOWS\apppatch
2018-06-21 17:50:09 ----D---- C:\Program Files\Windows Photo Viewer
2018-06-21 17:50:09 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-06-21 17:50:08 ----D---- C:\WINDOWS\Containers
2018-06-21 17:50:07 ----D---- C:\WINDOWS\system32\DriverStore
2018-06-21 17:20:27 ----RSD---- C:\WINDOWS\assembly
2018-06-21 17:13:14 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-21 17:13:14 ----D---- C:\WINDOWS\Logs
2018-06-21 17:06:15 ----HD---- C:\Program Files\WindowsApps
2018-06-21 17:05:34 ----HD---- C:\ProgramData
2018-06-21 17:00:55 ----D---- C:\WINDOWS\CbsTemp
2018-06-21 16:46:11 ----D---- C:\WINDOWS\Tasks
2018-06-21 16:13:57 ----D---- C:\ProgramData\APN
2018-06-21 15:52:29 ----RD---- C:\WINDOWS\PrintDialog
2018-06-21 15:01:59 ----RD---- C:\Program Files
2018-06-20 17:50:44 ----D---- C:\Windows
2018-06-18 18:48:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-06-14 18:57:29 ----D---- C:\Intel
2018-06-14 13:57:34 ----D---- C:\WINDOWS\system32\WDI
2018-06-14 08:19:30 ----D---- C:\WINDOWS\appcompat
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\IME
2018-06-13 19:24:11 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-TW
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-HK
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\zh-CN
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\tr-TR
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\th-TH
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\sv-SE
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\SPReview
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\spool
2018-06-13 19:24:11 ----D---- C:\WINDOWS\system32\drivers\etc
2018-06-13 19:24:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sl-SI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\sk-SK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ru-RU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ro-RO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-PT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pt-BR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\pl-PL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\OEM
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nl-NL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\NDF
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\nb-NO
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\MRT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lv-LV
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\lt-LT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ko-KR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ja-jp
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\it-IT
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\IME
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ihvmanager
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hu-HU
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\hr-HR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\he-IL
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fr-FR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\fi-FI
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\EventProviders
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\et-EE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\es-ES
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\el-GR
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\de-DE
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\da-DK
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\bg-BG
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\ar-SA
2018-06-13 19:24:10 ----D---- C:\WINDOWS\system32\appmgmt
2018-06-13 19:24:10 ----D---- C:\WINDOWS\schemas
2018-06-13 19:24:10 ----D---- C:\WINDOWS\ShellNew
2018-06-13 19:24:09 ----SHD---- C:\Program Files\Windows Sidebar
2018-06-13 19:24:09 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2018-06-13 19:24:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2018-06-13 19:24:09 ----RD---- C:\Program Files (x86)
2018-06-13 19:24:09 ----HD---- C:\WINDOWS\system32\GroupPolicy
2018-06-13 19:24:09 ----D---- C:\WINDOWS\system32\Recovery
2018-06-13 19:24:09 ----D---- C:\WINDOWS\Help
2018-06-13 19:24:09 ----D---- C:\Program Files\Intel
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\system
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files\microsoft shared
2018-06-13 19:24:09 ----D---- C:\Program Files\Common Files
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-06-13 19:24:09 ----D---- C:\Program Files (x86)\Common Files
2018-06-13 19:24:04 ----D---- C:\WINDOWS\Setup
2018-06-13 19:20:55 ----D---- C:\WINDOWS\ehome
2018-06-13 19:20:52 ----D---- C:\Program Files (x86)\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Windows Mail
2018-06-13 19:20:51 ----D---- C:\Program Files\Synaptics
2018-06-13 19:20:51 ----D---- C:\Program Files\Realtek
2018-06-13 19:15:20 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2018-06-13 19:15:20 ----D---- C:\WINDOWS\system32\inetsrv
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-06-13 19:14:38 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\uk-UA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\fr-CA
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\es-MX
2018-06-13 19:14:38 ----D---- C:\WINDOWS\system32\en-GB
2018-06-13 19:14:28 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-06-13 19:14:28 ----D---- C:\WINDOWS\system32\MUI
2018-06-13 19:13:59 ----D---- C:\WINDOWS\OCR
2018-06-13 18:44:15 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-06-13 18:37:13 ----D---- C:\WINDOWS\SoftwareDistribution
2018-06-13 18:37:13 ----D---- C:\Program Files\windows nt
2018-06-13 18:37:11 ----RD---- C:\Program Files\Windows Defender
2018-06-13 18:37:11 ----D---- C:\WINDOWS\system32\Tasks
2018-06-13 18:37:00 ----D---- C:\WINDOWS\Registration
2018-06-13 18:36:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-06-13 18:34:56 ----D---- C:\WINDOWS\system32\wbem
2018-06-13 18:34:54 ----SD---- C:\ProgramData\Microsoft
2018-06-13 18:34:50 ----RSD---- C:\WINDOWS\media
2018-06-13 18:31:39 ----RD---- C:\Users
2018-06-13 18:27:53 ----D---- C:\ProgramData\USOPrivate
2018-06-13 18:27:04 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-06-13 18:26:54 ----D---- C:\WINDOWS\SYSWOW64\sda
2018-06-13 18:26:45 ----SHDC---- C:\WINDOWS\Installer
2018-06-13 18:26:45 ----HD---- C:\Config.Msi
2018-06-13 18:26:43 ----D---- C:\WINDOWS\system32\DAX2
2018-06-13 18:26:31 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-06-13 18:26:02 ----D---- C:\WINDOWS\debug
2018-06-13 18:25:53 ----D---- C:\WINDOWS\twain_32
2018-06-13 18:25:53 ----D---- C:\Program Files (x86)\Lenovo EasyCamera
2018-06-13 18:24:55 ----SHD---- C:\Recovery
2018-06-13 11:24:14 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 11:24:11 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-06-12 09:28:31 ----D---- C:\ProgramData\Package Cache
2018-06-12 09:28:31 ----D---- C:\Program Files (x86)\Garmin
2018-06-06 12:23:11 ----D---- C:\WKOKES
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-05-31 15:30:42 ----D---- C:\WINDOWS\system32\drivers\wd

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [2015-10-22 72808]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
R3 ACPIVPC;@oem53.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2016-12-26 35576]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2016-06-26 610656]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 HpqKbFiltr;@oem38.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2010-02-16 25912]
R3 ICCWDT;@oem21.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igdkmd64.sys [2016-12-21 11039712]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-03-25 4874496]
R3 IntcDAud;@oem15.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-10-07 822248]
R3 MarvinBus;@oem8.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-24 261120]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2018-06-21 253664]
R3 MEIx64;@oem71.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-04 185896]
R3 Qcamain10x64;@netathr10x.inf,%ATHR.Service.DispName%;Qualcomm Extensible Wireless LAN 11AC device driver; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2018-04-12 2344448]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 rt640x64;@oem62.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-08-21 1009128]
R3 RTSUER;@oem61.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-12-22 413912]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 AtiDCM;AtiDCM; \??\C:\Users\Ilona\AppData\Local\Temp\atdcm64a.sys [2016-02-17 33992]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-06-08 945568]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 RTL8167;@oem78.inf,%rtl8167.Service.DispName%;Realtek 8167 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt64win7.sys [2016-01-22 1026304]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 semav6msr64;semav6msr64; \??\C:\windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-04 277032]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\AdminService.exe [2016-06-26 355760]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_80a64;Uživatelská služba platformy připojených zařízení_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DAX2API;Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [2016-01-27 163328]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 FastbootService;FastbootService; C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe [2015-10-22 193640]
R2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2018-06-06 1194512]
R2 hasplms;Sentinel LDK License Manager; C:\WINDOWS\system32\hasplms.exe [2015-09-23 4665168]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2010-04-05 103992]
R2 HPDayStarterService;HP DayStarter Service; c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe [2010-06-14 90112]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; c:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2009-12-10 251448]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-03-16 209184]
R2 Lenovo OKO Service;Lenovo OKO Service; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe [2016-01-07 2730280]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-02-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-03-16 416544]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-05-09 6541008]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 OKOControlSvc;OKOControlSvc; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe [2016-01-07 369960]
R2 OneSyncSvc_80a64;Hostitel synchronizace_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-02-14 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-03-01 264248]
S2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ca615c91f47053ea\igfxCUIService.exe [2016-12-21 341984]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2013-11-11 77944]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_80a64;Uživatelská služba pro GameDVR a vysílání her_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_80a64;Služba pro podporu uživatelů Bluetooth_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_80a64;CaptureService_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_80a64;DevicePicker_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_80a64;Tok zařízení_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-02-19 974632]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2016-06-02 273232]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_80a64;Služba zasílání zpráv_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-02-17 194000]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_80a64;Data kontaktů_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_80a64;PrintWorkflow_80a64; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-11 269504]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-06-13 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-13 194032]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]

-----------------EOF-----------------

OK. K tomu, abych mohl ve Win10 něco mazat, potřebuji log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 . V RSIT by se mohl poškodit systém.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by Ilona (administrator) on ILONA-HP (21-06-2018 22:28:35)
Running from C:\Users\Ilona\Desktop
Loaded Profiles: Ilona (Available Profiles: Ilona)
Platform: Windows 10 Pro Version 1803 17134.112 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Lenovo) C:\Program Files\Lenovo\OneKey Optimizer\bin\FBService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\NisSrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OnekeyOptimizerUpdata.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(OLYMPUS IMAGING CORP.) C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizer.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrv.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
(C. Ghisler & Co.) C:\totalcmd\TOTALCMD.EXE
Failed to access process -> FRST64.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1691192 2010-04-05] (Hewlett-Packard)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-04] (ActivIdentity)
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-04] (ActivIdentity)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2016-12-26] ()
HKLM\...\Run: [OneKeyOptimizer] => C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe [604968 2015-06-19] (Lenovo(beijing) Limited)
HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16473344 2016-03-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-03-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-03-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-03-25] (Realtek Semiconductor)
HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [736768 2016-02-04] ()
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-03-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM-x32\...\Run: [Lenovo Smart Fingerprint] => C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [1761208 2015-09-25] (Lenovo)
HKLM-x32\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [55664 2014-11-19] (OLYMPUS IMAGING CORP.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [PC Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1483264 2010-12-21] (Nokia)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [Akamai NetSession Interface] => "C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [420208 2014-11-19] (OLYMPUS IMAGING CORP.)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Windows\System32\Narrator.exe [349696 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\Narrator.exe [349696 2018-04-12] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Akcelerátor spuštění AutoCADu LT.lnk [2013-11-11]
ShortcutTarget: Akcelerátor spuštění AutoCADu LT.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe (Autodesk, Inc)
Startup: C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk [2018-06-21]
ShortcutTarget: Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk -> C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{45DEA2F3-27AC-4AA6-9600-C2D0BEEFF5D9}: [DhcpNameServer] 77.48.254.254 77.48.100.254
Tcpip\..\Interfaces\{71B02364-133E-44E6-AE0F-CD64CDC2061F}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{FF0E50EB-3868-45B0-8FFB-EFCF60AF0B83}: [NameServer] 192.168.110.1

Internet Explorer:
==================
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-19] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-19] (Oracle Corporation)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\Ilona\AppData\Roaming\Mozilla\Firefox\Profiles\f1576k7k.default-1489320477230 [2018-06-21]
FF HKLM-x32\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync
FF Extension: (PC Sync 2 Synchronisation Extension) - C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync [2011-03-13] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [Legacy] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=5.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2016-03-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2016-03-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-19] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.709 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll [2010-03-10] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.709 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2010-03-10] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-25] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\firefox-branding.js [2012-11-27]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\firefox-l10n.js [2012-11-27]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\firefox.js [2012-11-27]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\reporter.js [2012-11-27]

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Ilona\AppData\Local\Google\Chrome\User Data\Default [2018-06-21]
CHR Extension: (Skype) - C:\Users\Ilona\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ilona\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-03]
CHR Extension: (Chrome Media Router) - C:\Users\Ilona\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-01-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-04] (ActivIdentity)
S3 Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [77944 2013-11-11] (Autodesk)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [163328 2016-01-27] () [File not signed]
R2 FastbootService; C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe [193640 2015-10-22] (Lenovo)
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4665168 2015-09-23] (SafeNet Inc.)
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe [90112 2010-06-14] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [264248 2010-03-01] (Hewlett-Packard Company)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-03-16] (Intel Corporation)
R2 Lenovo OKO Service; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe [2730280 2016-01-07] (Lenovo(beijing) Limited)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [File not signed]
S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-05-16] (Nero AG)
R2 OKOControlSvc; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe [369960 2016-01-07] (Lenovo(beijing) Limited)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-04-12] (Microsoft Corporation)
R3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [628736 2010-12-08] (Nokia) [File not signed]
S2 Správce výběru OS; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2010-07-07] ()
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [23920 2017-12-12] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [290912 2017-08-21] (Synaptics Incorporated)
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2016-07-13] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2016-07-13] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-05-31] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-05-31] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AtiDCM; C:\Users\Ilona\AppData\Local\Temp\atdcm64a.sys [33992 2016-02-17] (Advanced Micro Devices, Inc.) <==== ATTENTION
R0 Fastboot; C:\WINDOWS\System32\DRIVERS\Fastboot.sys [72808 2015-10-22] (Windows (R) Win 7 DDK provider)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-06-21] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1009128 2017-08-21] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2015-12-22] (Realsil Semiconductor Corporation)
S3 semav6msr64; C:\windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [152064 2018-04-12] (Microsoft Corporation)
R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2016-07-13] (Synaptics Incorporated)
R3 SPUVCbv; C:\WINDOWS\System32\Drivers\SPUVCbv64.sys [899672 2017-10-19] (Sunplus Innovation Technology Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-05-31] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [313384 2018-05-31] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-05-31] (Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-21 22:28 - 2018-06-21 22:28 - 000022810 _____ C:\Users\Ilona\Desktop\FRST.txt
2018-06-21 22:28 - 2018-06-21 22:23 - 002412544 _____ (Farbar) C:\Users\Ilona\Desktop\FRST64.exe
2018-06-21 22:24 - 2018-06-21 22:28 - 000000000 ____D C:\FRST
2018-06-21 21:57 - 2018-06-21 13:41 - 001222144 _____ C:\Users\Ilona\Desktop\RSITx64.exe
2018-06-21 17:05 - 2018-06-21 17:05 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-06-21 15:02 - 2018-06-21 17:51 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-06-21 15:02 - 2018-06-21 15:02 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-06-21 15:02 - 2018-06-21 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-06-21 15:02 - 2018-05-24 06:55 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-06-21 15:01 - 2018-06-21 15:01 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-21 15:01 - 2018-06-21 15:01 - 000000000 ____D C:\Program Files\Malwarebytes
2018-06-21 13:42 - 2018-06-21 21:57 - 000000000 ____D C:\Program Files\trend micro
2018-06-21 13:42 - 2018-06-21 13:43 - 000000000 ____D C:\rsit
2018-06-18 19:35 - 2018-06-18 19:35 - 000000080 ___SH C:\bootTel.dat
2018-06-18 18:50 - 2017-08-21 03:43 - 001009128 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2018-06-14 14:04 - 2018-06-21 16:46 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-06-14 14:03 - 2018-06-21 16:46 - 003457074 _____ C:\WINDOWS\ntbtlog.txt
2018-06-14 13:52 - 2018-06-14 13:52 - 000000000 ____D C:\Users\Ilona\AppData\Local\D3DSCache
2018-06-13 21:01 - 2018-06-08 21:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-13 21:01 - 2018-06-08 21:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 21:01 - 2018-06-08 20:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-13 21:01 - 2018-06-08 20:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 21:01 - 2018-06-08 20:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 21:01 - 2018-06-08 20:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-13 21:01 - 2018-06-08 19:06 - 001539488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-06-13 21:01 - 2018-06-08 18:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-13 21:01 - 2018-06-08 12:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 21:01 - 2018-06-08 12:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-13 21:01 - 2018-06-08 11:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 21:01 - 2018-06-08 11:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-13 21:01 - 2018-06-08 11:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 21:01 - 2018-06-08 11:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 21:01 - 2018-06-08 11:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 21:01 - 2018-06-08 11:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-13 21:01 - 2018-06-08 11:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-13 21:01 - 2018-06-08 11:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-13 21:01 - 2018-06-08 11:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 21:01 - 2018-06-08 11:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-13 21:01 - 2018-06-08 11:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-13 21:01 - 2018-06-08 11:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-13 21:01 - 2018-06-08 11:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-13 21:01 - 2018-06-08 11:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-13 21:01 - 2018-06-08 11:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-13 21:01 - 2018-06-08 11:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-13 21:01 - 2018-06-08 11:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-13 21:01 - 2018-06-08 11:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 21:01 - 2018-06-08 10:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-13 21:01 - 2018-06-08 10:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 21:01 - 2018-06-08 10:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-13 21:01 - 2018-06-08 10:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-13 21:01 - 2018-06-08 10:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-13 21:01 - 2018-06-08 10:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-13 21:01 - 2018-06-08 10:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 21:01 - 2018-06-06 20:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 21:00 - 2018-06-08 21:07 - 002266520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-13 21:00 - 2018-06-08 21:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-13 21:00 - 2018-06-08 21:07 - 000183712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2018-06-13 21:00 - 2018-06-08 21:07 - 000040864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2018-06-13 21:00 - 2018-06-08 21:07 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2018-06-13 21:00 - 2018-06-08 21:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-13 21:00 - 2018-06-08 21:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-13 21:00 - 2018-06-08 21:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-13 21:00 - 2018-06-08 21:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-13 21:00 - 2018-06-08 20:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 21:00 - 2018-06-08 20:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-13 21:00 - 2018-06-08 20:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 21:00 - 2018-06-08 20:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-13 21:00 - 2018-06-08 20:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 21:00 - 2018-06-08 20:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 21:00 - 2018-06-08 20:44 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2018-06-13 21:00 - 2018-06-08 20:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 21:00 - 2018-06-08 20:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-13 21:00 - 2018-06-08 20:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 21:00 - 2018-06-08 20:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-13 21:00 - 2018-06-08 20:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-13 21:00 - 2018-06-08 20:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 21:00 - 2018-06-08 20:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-13 21:00 - 2018-06-08 20:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 21:00 - 2018-06-08 20:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 21:00 - 2018-06-08 20:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 21:00 - 2018-06-08 20:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-13 21:00 - 2018-06-08 20:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 21:00 - 2018-06-08 20:42 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
2018-06-13 21:00 - 2018-06-08 20:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-13 21:00 - 2018-06-08 20:42 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2018-06-13 21:00 - 2018-06-08 20:42 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2018-06-13 21:00 - 2018-06-08 20:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 21:00 - 2018-06-08 20:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-13 21:00 - 2018-06-08 20:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-13 21:00 - 2018-06-08 20:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-13 21:00 - 2018-06-08 20:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 21:00 - 2018-06-08 20:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-13 21:00 - 2018-06-08 20:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-13 21:00 - 2018-06-08 19:07 - 000148896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2018-06-13 21:00 - 2018-06-08 19:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-13 21:00 - 2018-06-08 18:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-13 21:00 - 2018-06-08 18:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-13 21:00 - 2018-06-08 18:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-13 21:00 - 2018-06-08 18:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-13 21:00 - 2018-06-08 18:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-13 21:00 - 2018-06-08 18:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-13 21:00 - 2018-06-08 18:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-13 21:00 - 2018-06-08 18:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-13 21:00 - 2018-06-08 18:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-13 21:00 - 2018-06-08 18:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-13 21:00 - 2018-06-08 18:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-13 21:00 - 2018-06-08 18:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-13 21:00 - 2018-06-08 18:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-13 21:00 - 2018-06-08 18:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-13 21:00 - 2018-06-08 18:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-13 21:00 - 2018-06-08 18:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-13 21:00 - 2018-06-08 18:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00 - 2018-06-08 18:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 21:00 - 2018-06-08 16:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 21:00 - 2018-06-08 16:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-13 21:00 - 2018-06-08 12:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-13 21:00 - 2018-06-08 12:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-13 21:00 - 2018-06-08 12:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-13 21:00 - 2018-06-08 12:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-13 21:00 - 2018-06-08 12:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-13 21:00 - 2018-06-08 12:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-13 21:00 - 2018-06-08 12:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-13 21:00 - 2018-06-08 12:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-13 21:00 - 2018-06-08 11:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-13 21:00 - 2018-06-08 11:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-13 21:00 - 2018-06-08 11:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-13 21:00 - 2018-06-08 11:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 21:00 - 2018-06-08 11:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 21:00 - 2018-06-08 11:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 21:00 - 2018-06-08 11:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-13 21:00 - 2018-06-08 11:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-13 21:00 - 2018-06-08 11:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-13 21:00 - 2018-06-08 11:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-13 21:00 - 2018-06-08 11:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-13 21:00 - 2018-06-08 11:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 21:00 - 2018-06-08 11:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-13 21:00 - 2018-06-08 11:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-13 21:00 - 2018-06-08 11:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-13 21:00 - 2018-06-08 11:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-13 21:00 - 2018-06-08 11:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 21:00 - 2018-06-08 11:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-13 21:00 - 2018-06-08 11:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-13 21:00 - 2018-06-08 11:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-13 21:00 - 2018-06-08 11:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-13 21:00 - 2018-06-08 11:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 21:00 - 2018-06-08 11:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 21:00 - 2018-06-08 11:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-13 21:00 - 2018-06-08 11:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-13 21:00 - 2018-06-08 11:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-13 21:00 - 2018-06-08 11:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-13 21:00 - 2018-06-08 11:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-13 21:00 - 2018-06-08 11:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-13 21:00 - 2018-06-08 11:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 21:00 - 2018-06-08 11:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 21:00 - 2018-06-08 11:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 21:00 - 2018-06-08 11:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-13 21:00 - 2018-06-08 11:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-13 21:00 - 2018-06-08 11:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-13 21:00 - 2018-06-08 11:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 21:00 - 2018-06-08 11:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-13 21:00 - 2018-06-08 11:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-13 21:00 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-13 21:00 - 2018-06-08 11:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-13 21:00 - 2018-06-08 11:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00 - 2018-06-08 11:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-13 21:00 - 2018-06-08 11:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-13 21:00 - 2018-06-08 11:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-13 21:00 - 2018-06-08 11:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 21:00 - 2018-06-08 11:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-13 21:00 - 2018-06-08 10:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-13 21:00 - 2018-06-08 10:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00 - 2018-06-08 10:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-13 21:00 - 2018-06-08 10:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-13 21:00 - 2018-06-08 10:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-13 21:00 - 2018-06-08 10:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-13 21:00 - 2018-06-08 10:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 21:00 - 2018-06-08 10:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 21:00 - 2018-06-08 10:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-13 21:00 - 2018-06-08 10:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-13 21:00 - 2018-06-08 10:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-13 21:00 - 2018-06-08 10:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-13 21:00 - 2018-06-08 10:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-13 21:00 - 2018-06-08 10:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-13 21:00 - 2018-06-08 10:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-13 21:00 - 2018-06-08 10:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 21:00 - 2018-06-08 10:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-13 21:00 - 2018-06-08 09:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-13 21:00 - 2018-06-06 06:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-13 21:00 - 2018-06-02 01:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 21:00 - 2018-06-02 00:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 21:00 - 2018-05-25 05:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-13 19:20 - 2018-06-13 19:24 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-06-13 19:20 - 2018-06-13 19:20 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2018-06-13 19:20 - 2018-06-13 19:20 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2018-06-13 19:19 - 2018-06-13 19:20 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-06-13 19:19 - 2018-06-13 19:19 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-06-13 19:17 - 2018-06-13 19:17 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-06-13 19:17 - 2018-06-13 19:17 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-06-13 19:17 - 2018-06-13 19:17 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000826776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-06-13 19:17 - 2018-06-13 19:17 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000652184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-06-13 19:17 - 2018-06-13 19:17 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000399768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-06-13 19:17 - 2018-06-13 19:17 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-06-13 19:17 - 2018-06-13 19:17 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-06-13 19:17 - 2018-06-13 19:17 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-13 19:17 - 2018-06-13 19:17 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-06-13 19:17 - 2018-06-13 19:17 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-06-13 19:17 - 2018-06-13 19:17 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000022936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-13 19:17 - 2018-06-13 19:17 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-06-13 19:17 - 2018-06-13 19:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-06-13 19:17 - 2018-06-13 19:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-06-13 19:15 - 2018-06-13 19:15 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2018-06-13 19:15 - 2018-06-13 19:15 - 000000000 ____D C:\WINDOWS\system32\msmq
2018-06-13 19:15 - 2018-06-13 19:15 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2018-06-13 19:15 - 2018-06-13 19:15 - 000000000 ____D C:\inetpub
2018-06-13 19:14 - 2018-06-13 19:14 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-06-13 19:14 - 2018-06-13 19:14 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-06-13 19:14 - 2018-06-13 19:14 - 000000000 ____D C:\Program Files\MSBuild
2018-06-13 19:14 - 2018-06-13 19:14 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-06-13 19:14 - 2018-06-13 19:14 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-06-13 19:14 - 2018-04-11 07:48 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-06-13 19:14 - 2018-04-11 07:45 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-06-13 19:14 - 2018-04-11 07:41 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-06-13 19:14 - 2018-04-11 06:14 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-06-13 19:14 - 2018-04-11 06:12 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-06-13 19:14 - 2018-04-11 06:09 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-06-13 19:14 - 2018-03-05 17:07 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-06-13 19:14 - 2018-03-05 17:07 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:14 - 2018-03-05 17:07 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-06-13 19:14 - 2018-02-14 17:21 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-06-13 19:14 - 2018-02-14 17:21 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-13 19:14 - 2018-02-14 17:21 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-06-13 19:14 - 2017-10-29 19:03 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-06-13 19:14 - 2017-10-29 17:42 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-06-13 19:13 - 2018-04-10 22:11 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2018-06-13 19:13 - 2018-04-10 22:10 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2018-06-13 19:13 - 2018-04-10 22:09 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2018-06-13 19:13 - 2018-04-10 22:06 - 005487616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2018-06-13 19:13 - 2018-04-10 22:02 - 006350848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2018-06-13 18:37 - 2018-06-21 17:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-13 18:37 - 2018-06-21 11:56 - 000004196 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{89207691-B4C2-4B9E-BA55-9838FCE64BBD}
2018-06-13 18:37 - 2018-06-13 18:37 - 000003816 _____ C:\WINDOWS\System32\Tasks\AMD Updater
2018-06-13 18:37 - 2018-06-13 18:37 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-06-13 18:37 - 2018-06-13 18:37 - 000003400 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-06-13 18:37 - 2018-06-13 18:37 - 000003194 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-06-13 18:37 - 2018-06-13 18:37 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-06-13 18:37 - 2018-06-13 18:37 - 000003136 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2018-06-13 18:37 - 2018-06-13 18:37 - 000002856 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3823873606-208965420-2629628224-1002
2018-06-13 18:37 - 2018-06-13 18:37 - 000002702 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2018-06-13 18:37 - 2018-06-13 18:37 - 000002660 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Officejet Pro 8600
2018-06-13 18:37 - 2018-06-13 18:37 - 000002656 _____ C:\WINDOWS\System32\Tasks\hpUrlLauncher.exe_{37397910-6B89-4F24-A84F-EAB918493F88}
2018-06-13 18:37 - 2018-06-13 18:37 - 000002536 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2018-06-13 18:37 - 2018-06-13 18:37 - 000002306 _____ C:\WINDOWS\System32\Tasks\{3CA28D26-BA4F-4A68-91B0-F4F3AA70F16A}
2018-06-13 18:37 - 2018-06-13 18:37 - 000002278 _____ C:\WINDOWS\System32\Tasks\{43D3AB56-B3FD-429A-856C-BBC2CA1C43BE}
2018-06-13 18:37 - 2018-06-13 18:37 - 000002266 _____ C:\WINDOWS\System32\Tasks\{DFDF94EF-721F-46D0-A29D-1D892358B1BE}
2018-06-13 18:37 - 2018-06-13 18:37 - 000002180 _____ C:\WINDOWS\System32\Tasks\{E2A527CB-6F93-4F82-80A4-1A2A95205BA4}
2018-06-13 18:37 - 2018-06-13 18:37 - 000002078 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2018-06-13 18:37 - 2018-06-13 18:37 - 000002014 _____ C:\WINDOWS\System32\Tasks\{1807EA7A-F7E1-4A97-BCD8-B603E1F5E149}
2018-06-13 18:37 - 2018-06-13 18:37 - 000000020 ___SH C:\Users\Ilona\ntuser.ini
2018-06-13 18:37 - 2018-06-13 18:37 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD
2018-06-13 18:37 - 2018-06-13 18:37 - 000000000 ____D C:\WINDOWS\System32\Tasks\TVT
2018-06-13 18:37 - 2018-06-13 18:37 - 000000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2018-06-13 18:37 - 2018-06-13 18:37 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-06-13 18:36 - 2018-06-13 18:37 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-06-13 18:36 - 2018-06-13 18:37 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-06-13 18:32 - 2018-06-13 18:32 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-06-13 18:31 - 2018-06-13 18:37 - 000000000 ____D C:\Users\Ilona
2018-06-13 18:31 - 2018-06-13 18:32 - 000000000 ____D C:\Users\Ilona\AppData\Local\Microsoft Help
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Šablony
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Soubory cookie
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Poslední
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Okolní tiskárny
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Okolní síť
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Nabídka Start
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Dokumenty
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\Data aplikací
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-06-13 18:31 - 2018-06-13 18:31 - 000000000 _SHDL C:\Users\Ilona\AppData\Local\Data aplikací
2018-06-13 18:31 - 2018-04-12 01:34 - 000001105 _____ C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-13 18:27 - 2018-06-21 21:58 - 001878262 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-13 18:27 - 2018-06-13 18:27 - 000000000 ____D C:\ProgramData\USOShared
2018-06-13 18:26 - 2018-06-13 18:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2018-06-13 18:26 - 2018-06-13 18:26 - 000000000 ____D C:\ProgramData\Dolby
2018-06-13 18:26 - 2018-06-13 18:26 - 000000000 ____D C:\Program Files\Dolby
2018-06-13 18:26 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-06-13 18:26 - 2016-12-21 05:02 - 000113672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-06-13 18:24 - 2018-06-21 22:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-13 18:24 - 2018-06-21 17:51 - 000488896 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-12 09:28 - 2018-06-13 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2018-06-12 09:28 - 2018-06-12 09:28 - 000001963 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2018-06-04 22:08 - 2018-06-04 22:08 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2018-06-04 13:10 - 2018-06-13 18:37 - 000000000 ___DC C:\WINDOWS\Panther

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-21 22:23 - 2011-01-07 23:03 - 000000000 ____D C:\Users\Ilona\AppData\Roaming\Skype
2018-06-21 22:03 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-21 21:58 - 2018-04-12 17:51 - 000778804 _____ C:\WINDOWS\system32\perfh005.dat
2018-06-21 21:58 - 2018-04-12 17:51 - 000176870 _____ C:\WINDOWS\system32\perfc005.dat
2018-06-21 21:58 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-21 20:53 - 2016-12-26 12:48 - 000000000 ____D C:\ProgramData\Lenovo
2018-06-21 17:53 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-21 17:51 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-21 17:51 - 2017-01-07 16:45 - 000000000 ____D C:\ProgramData\Synaptics
2018-06-21 17:50 - 2018-04-12 18:12 - 000000000 ____D C:\WINDOWS\Containers
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-06-21 17:50 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Provisioning
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-21 17:50 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-21 17:50 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-21 17:12 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-21 17:06 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-21 17:06 - 2017-11-19 18:11 - 000000000 ____D C:\Users\Ilona\AppData\Local\Packages
2018-06-21 16:34 - 2017-11-19 18:11 - 000000000 __SHD C:\Users\Ilona\IntelGraphicsProfiles
2018-06-21 16:13 - 2013-10-03 08:32 - 000000000 ____D C:\ProgramData\APN
2018-06-21 15:52 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-06-20 17:50 - 2017-11-23 10:26 - 000001815 _____ C:\WINDOWS\InstallUtil.InstallLog
2018-06-18 19:03 - 2017-07-05 13:22 - 000000000 ____D C:\Users\Ilona\AppData\Local\ElevatedDiagnostics
2018-06-18 10:47 - 2017-11-19 18:11 - 000000000 ____D C:\Users\Ilona\AppData\Local\ConnectedDevicesPlatform
2018-06-14 18:57 - 2016-12-26 13:47 - 000000000 ____D C:\Intel
2018-06-14 08:19 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\appcompat
2018-06-13 23:18 - 2017-11-19 18:28 - 000000000 ____D C:\Users\Ilona\AppData\Local\PlaceholderTileLogoFolder
2018-06-13 22:54 - 2012-10-21 18:58 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-13 22:54 - 2012-10-21 18:58 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-13 19:24 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup
2018-06-13 19:24 - 2018-04-12 01:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 __SHD C:\Program Files\Windows Sidebar
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\IME
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\schemas
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\system
2018-06-13 19:24 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-06-13 19:24 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-06-13 19:24 - 2017-08-27 18:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLYMPUS Digital Camera Updater
2018-06-13 19:24 - 2017-08-27 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLYMPUS Viewer 3
2018-06-13 19:24 - 2017-08-27 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 19
2018-06-13 19:24 - 2017-03-27 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-06-13 19:24 - 2016-12-26 14:08 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2018-06-13 19:24 - 2016-12-26 13:44 - 000000000 ____D C:\Program Files\Intel
2018-06-13 19:24 - 2016-12-26 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2018-06-13 19:24 - 2014-06-11 15:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-13 19:24 - 2014-06-11 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-06-13 19:24 - 2013-11-11 22:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2018-06-13 19:24 - 2013-10-03 08:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-06-13 19:24 - 2013-09-15 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-06-13 19:24 - 2013-02-03 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2018-06-13 19:24 - 2013-01-24 11:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ekonomický SW ABRA
2018-06-13 19:24 - 2011-09-12 22:08 - 000000000 ____D C:\WINDOWS\system32\SPReview
2018-06-13 19:24 - 2011-09-12 22:08 - 000000000 ____D C:\WINDOWS\system32\EventProviders
2018-06-13 19:24 - 2011-06-28 09:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kokeš
2018-06-13 19:24 - 2011-06-14 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
2018-06-13 19:24 - 2011-03-13 12:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite
2018-06-13 19:24 - 2011-01-25 14:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2018-06-13 19:24 - 2011-01-08 11:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STORMWARE Office
2018-06-13 19:24 - 2011-01-08 02:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2018-06-13 19:24 - 2011-01-08 02:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.2
2018-06-13 19:24 - 2011-01-08 02:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Premium
2018-06-13 19:24 - 2011-01-07 23:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-13 19:24 - 2011-01-07 23:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2018-06-13 19:24 - 2011-01-07 23:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2018-06-13 19:24 - 2011-01-07 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
2018-06-13 19:24 - 2011-01-07 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
2018-06-13 19:24 - 2011-01-07 21:33 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2018-06-13 19:24 - 2010-12-28 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2018-06-13 19:24 - 2010-12-28 21:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
2018-06-13 19:24 - 2010-11-09 14:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Energy Star
2018-06-13 19:24 - 2010-11-09 14:30 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC
2018-06-13 19:24 - 2010-09-18 00:48 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
2018-06-13 19:24 - 2010-09-18 00:15 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2018-06-13 19:24 - 2009-07-27 16:36 - 000000000 ____D C:\WINDOWS\ShellNew
2018-06-13 19:24 - 2009-07-14 05:20 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-06-13 19:23 - 2018-04-12 01:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-06-13 19:20 - 2016-12-26 14:02 - 000000000 ____D C:\Program Files\Realtek
2018-06-13 19:20 - 2016-12-26 13:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan 1.0.3.1
2018-06-13 19:20 - 2011-01-07 23:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2018-06-13 19:20 - 2011-01-07 22:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2018-06-13 19:20 - 2010-09-18 00:26 - 000000000 ____D C:\Program Files\Synaptics
2018-06-13 19:15 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-06-13 19:15 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-06-13 19:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-06-13 19:13 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\OCR
2018-06-13 18:37 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-06-13 18:37 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration
2018-06-13 18:37 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\windows nt
2018-06-13 18:37 - 2018-04-11 23:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-06-13 18:37 - 2017-11-19 18:11 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-13 18:37 - 2017-11-19 18:11 - 000000000 ___RD C:\Users\Ilona\3D Objects
2018-06-13 18:37 - 2010-12-28 22:10 - 000000000 ___RD C:\Users\Ilona\Virtual Machines
2018-06-13 18:34 - 2018-04-12 01:38 - 000000000 __RSD C:\WINDOWS\media
2018-06-13 18:34 - 2017-11-19 18:07 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-06-13 18:32 - 2014-01-09 15:52 - 000000000 ____D C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2018-06-13 18:32 - 2011-01-07 23:25 - 000000000 ____D C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-13 18:32 - 2011-01-07 23:23 - 000000000 ____D C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2018-06-13 18:31 - 2017-11-19 13:38 - 000000000 ___RD C:\Users\Ilona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2018-06-13 18:27 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-06-13 18:27 - 2014-06-11 16:27 - 001791056 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2018-06-13 18:26 - 2016-12-26 14:05 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-06-13 18:26 - 2016-12-26 14:02 - 000104188 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2018-06-13 18:26 - 2016-12-26 14:02 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-06-13 18:26 - 2016-12-26 14:02 - 000000000 ____D C:\WINDOWS\system32\DAX2
2018-06-13 18:25 - 2017-11-19 18:11 - 000000000 ____D C:\Program Files (x86)\Lenovo EasyCamera
2018-06-13 11:24 - 2017-11-19 18:51 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 11:24 - 2011-01-07 23:11 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-12 09:28 - 2016-07-22 14:12 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-12 09:28 - 2016-07-22 14:12 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-06-06 12:23 - 2011-09-23 09:56 - 000000000 ____D C:\WKOKES
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-05-31 15:30 - 2018-02-18 22:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Files in the root of some directories =======

2014-03-12 22:42 - 2014-03-12 22:49 - 264243145 _____ (Autodesk, Inc.) C:\Program Files (x86)\SetupDWGTrueView2014_ENU_32bit.sfx.exe
2017-08-27 18:38 - 2017-12-04 18:34 - 000001653 _____ () C:\Users\Ilona\AppData\Roaming\ILONA-HP.MTBF.txt
2017-03-12 14:16 - 2017-03-12 14:16 - 000000600 _____ () C:\Users\Ilona\AppData\Roaming\winscp.rnd
2011-01-25 14:27 - 2017-08-27 18:44 - 000044544 _____ () C:\Users\Ilona\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-17 12:12 - 2015-11-17 12:12 - 000007606 _____ () C:\Users\Ilona\AppData\Local\Resmon.ResmonCfg
2011-12-03 12:43 - 2011-12-03 12:43 - 000000000 _____ () C:\Users\Ilona\AppData\Local\{BE8CFAFF-B260-4833-8786-E288237E4121}

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-06-13 18:24

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [Akamai NetSession Interface] => "C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe"
C:\Users\Ilona\AppData\Local\Akamai
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
URLSearchHook: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
U3 idsvc; no ImagePath
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\{3CA28D26-BA4F-4A68-91B0-F4F3AA70F16A}
C:\WINDOWS\System32\Tasks\{43D3AB56-B3FD-429A-856C-BBC2CA1C43BE}
C:\WINDOWS\System32\Tasks\{DFDF94EF-721F-46D0-A29D-1D892358B1BE}
C:\WINDOWS\System32\Tasks\{E2A527CB-6F93-4F82-80A4-1A2A95205BA4}
C:\WINDOWS\System32\Tasks\{1807EA7A-F7E1-4A97-BCD8-B603E1F5E149}
C:\Users\Ilona\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Ilona\AppData\Local\{BE8CFAFF-B260-4833-8786-E288237E4121}

EmptyTemp:
End

Fix result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by Ilona (22-06-2018 11:54:02) Run:1
Running from C:\Users\Ilona\Desktop
Loaded Profiles: Ilona (Available Profiles: Ilona)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\...\Run: [Akamai NetSession Interface] => "C:\Users\Ilona\AppData\Local\Akamai\netsession_win.exe"
C:\Users\Ilona\AppData\Local\Akamai
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com
URLSearchHook: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3823873606-208965420-2629628224-1002 -> {984F58CE-D94F-4C42-B44B-90D604E76F29} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
U3 idsvc; no ImagePath
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\{3CA28D26-BA4F-4A68-91B0-F4F3AA70F16A}
C:\WINDOWS\System32\Tasks\{43D3AB56-B3FD-429A-856C-BBC2CA1C43BE}
C:\WINDOWS\System32\Tasks\{DFDF94EF-721F-46D0-A29D-1D892358B1BE}
C:\WINDOWS\System32\Tasks\{E2A527CB-6F93-4F82-80A4-1A2A95205BA4}
C:\WINDOWS\System32\Tasks\{1807EA7A-F7E1-4A97-BCD8-B603E1F5E149}
C:\Users\Ilona\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Ilona\AppData\Local\{BE8CFAFF-B260-4833-8786-E288237E4121}

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
"HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface" => removed successfully
"C:\Users\Ilona\AppData\Local\Akamai" => not found
HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
"HKU\S-1-5-21-3823873606-208965420-2629628224-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{984F58CE-D94F-4C42-B44B-90D604E76F29}" => removed successfully
HKLM\Software\Classes\CLSID\{984F58CE-D94F-4C42-B44B-90D604E76F29} => not found
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{984F58CE-D94F-4C42-B44B-90D604E76F29}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{984F58CE-D94F-4C42-B44B-90D604E76F29} => not found
"HKU\S-1-5-21-3823873606-208965420-2629628224-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{984F58CE-D94F-4C42-B44B-90D604E76F29}" => removed successfully
HKLM\Software\Classes\CLSID\{984F58CE-D94F-4C42-B44B-90D604E76F29} => not found
"HKLM\System\CurrentControlSet\Services\idsvc" => removed successfully
idsvc => service removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\System32\Tasks\{3CA28D26-BA4F-4A68-91B0-F4F3AA70F16A} => moved successfully
C:\WINDOWS\System32\Tasks\{43D3AB56-B3FD-429A-856C-BBC2CA1C43BE} => moved successfully
C:\WINDOWS\System32\Tasks\{DFDF94EF-721F-46D0-A29D-1D892358B1BE} => moved successfully
C:\WINDOWS\System32\Tasks\{E2A527CB-6F93-4F82-80A4-1A2A95205BA4} => moved successfully
C:\WINDOWS\System32\Tasks\{1807EA7A-F7E1-4A97-BCD8-B603E1F5E149} => moved successfully
C:\Users\Ilona\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Users\Ilona\AppData\Local\{BE8CFAFF-B260-4833-8786-E288237E4121} => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 115541813 B
Java, Flash, Steam htmlcache => 2015 B
Windows/system/drivers => 2060492 B
Edge => 2715914 B
Chrome => 205602065 B
Firefox => 201305803 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 33058 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 40834 B
NetworkService => 0 B
Ilona => 92399208 B

RecycleBin => 258032 B
EmptyTemp: => 597 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 11:54:57 ====

Smazáno. Jak to vypadá nyní?

Vše se zdá jak má být, děkuji moc.

Rádo se stalo!