VIRY.CZ

Zdravím pánové,
Dlouho jsem tu nebyl vše bylo ok, nový noťas atd. Každopádně první problém už je na světě cca po 10 měsících , notebook se pravidelně třeba jednou denně sekne, vyhodí modrou obrazovku a restart. Zamrzání je pravidelné, je znát i pomalejší výkon občas se mi zdá že si to dělá co chce. Až někdo budete mít čas koukněte mi na to, díky moc

Logfile of random's system information tool 1.10 (written by random/random)
Run by Etas at 2018-08-29 12:18:16
Microsoft Windows 10 Home
System drive C: has 17 GB (28%) free of 58 GB
Total RAM: 3936 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:18:22, on 29.08.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Users\Etas\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files\trend micro\Etas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer17win10.msn.com/?pc=ACTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer17win10.msn.com/?pc=ACTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Etas\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHDCPSvc.exe
O23 - Service: Dashlane Upgrade Service - Dashlane, Inc. - C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @oem27.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Unknown owner - C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem11.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\iCLS\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10985 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-f0fb3c64-e5c4-45a3-b1a0-ecc962d5c00c -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-13a8aa2e-03c5-425c-9200-97c09efaadc3 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-b03ac183-77cd-4fad-8f67-5da174f5dfed -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cc040e99-310d-4e67-9e1c-07c52234928b -LifetimeId:bdf34276-e524-423d-ab1c-9ba4015fa22d -DeviceGroupId:
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7113d44a-ccb5-46d8-a712-c3c2ebf0d3b8 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-09dc7290-707b-4da9-a2ed-aca7cf0b27c4 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5e7d8d6b-aa69-48df-90be-8a8af792be2d -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-17cb409b-f6c4-46d6-90aa-978db1f9bdbe -LifetimeId:9bc8f972-d7a7-4682-8e0f-a88a5fa7c402 -DeviceGroupId:
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc

c:\windows\system32\svchost.exe -k appmodel -p -s camsvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS

C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
C:\WINDOWS\system32\WLANExt.exe 2671224450592
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHDCPSvc.exe
C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe
C:\WINDOWS\system32\ibtsiva
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\SysWOW64\PnkBstrB.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService

c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHeciSvc.exe
c:\windows\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SensorService
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe"

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\igfxEM.exe"
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"ctfmon.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ASC
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /CT
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:\Users\Etas\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\PowerISO\PWRISOVM.EXE" -startup
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Users\Etas\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe" /LOGON
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18071.11811.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\LibertyGlobal.HorizonGoCZ_2.5.0.0_x64__gmwgfebrpy77e\HorizonGo.Win10.exe" -ServerName:App.AppXv7krygf326d2a731fawkkfde9116mvjp.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11807.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Etas\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Etas\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Etas\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=68.0.3440.106 --initial-client-data=0x1d8,0x1dc,0x1e0,0x1d4,0x1e4,0x7ff8adec24d0,0x7ff8adec24e0,0x7ff8adec24f0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=1824 --on-initialized-event-handle=652 --parent-handle=656 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=F17521EF974DD4C1C11F42E82B395EAC --mojo-platform-channel-handle=1616 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --service-pipe-token=083FCF8BD1D2A721C2F0DDA125012618 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.5 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=083FCF8BD1D2A721C2F0DDA125012618 --renderer-client-id=3 --mojo-platform-channel-handle=2840 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --service-pipe-token=28D5A97DE9379F8DC98514FF070B9EF8 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.5 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=28D5A97DE9379F8DC98514FF070B9EF8 --renderer-client-id=18 --mojo-platform-channel-handle=4836 /prefetch:1
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.10730.20053.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.10730.20053.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --service-pipe-token=036C999869B159AF7CC91C2CA187D5DC --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.5 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=036C999869B159AF7CC91C2CA187D5DC --renderer-client-id=142 --mojo-platform-channel-handle=5752 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --service-pipe-token=4F6B7B36AE84D45FC7CE1E7F62CF1B68 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.5 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4F6B7B36AE84D45FC7CE1E7F62CF1B68 --renderer-client-id=152 --mojo-platform-channel-handle=7100 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe49_ Global\UsGthrCtrlFltPipeMssGthrPipe49 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1332,13212805647798506603,16304558857640262963,131072 --service-pipe-token=77D51B7EE951683C59FC6EF9AE6BADCD --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.5 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=77D51B7EE951683C59FC6EF9AE6BADCD --renderer-client-id=153 --mojo-platform-channel-handle=8920 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\system32\AUDIODG.EXE 0x4f0
"C:\Users\Etas\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost

======Scheduled tasks folder======

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-08-23 204880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-08-16 152104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-26 18394608]
"RtHDVBg_ASC"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-26 1502704]
"RtHDVBg_CTPreset"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-26 1502704]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2018-07-30 178504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Etas\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-08-24 1535112]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2016-05-25 406664]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-08-29 12:18:16 ----D---- C:\rsit
2018-08-29 12:18:16 ----D---- C:\Program Files\trend micro
2018-08-26 14:40:29 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-08-16 16:59:42 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-08-16 16:59:42 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-08-16 16:59:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-08-16 16:59:41 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-08-16 16:59:41 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2018-08-16 16:59:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-08-16 16:59:40 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-08-16 16:59:39 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-08-16 16:59:35 ----A---- C:\WINDOWS\system32\drivers\Ucx01000.sys
2018-08-16 16:59:34 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-08-16 16:59:34 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-08-16 16:59:34 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-08-16 16:59:33 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2018-08-16 16:59:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-08-16 16:59:32 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2018-08-16 16:59:32 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2018-08-16 16:59:32 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2018-08-16 16:59:32 ----A---- C:\WINDOWS\system32\cloudAP.dll
2018-08-16 16:59:32 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-08-16 16:59:31 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-08-16 16:59:31 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-08-16 16:59:30 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-08-16 16:59:30 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-08-16 16:59:30 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-08-16 16:59:30 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-08-16 16:59:30 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-08-16 16:59:29 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-08-16 16:59:29 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-08-16 16:59:29 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-08-16 16:59:29 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-08-16 16:59:28 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-08-16 16:59:28 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-08-16 16:59:28 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-08-16 16:59:28 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-08-16 16:59:27 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-08-16 16:59:27 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-08-16 16:59:26 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-08-16 16:59:26 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-08-16 16:59:26 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-08-16 16:59:26 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-08-16 16:59:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-08-16 16:59:25 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2018-08-16 16:59:25 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-08-16 16:59:25 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-08-16 16:59:25 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-08-16 16:59:24 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2018-08-16 16:59:24 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2018-08-16 16:59:24 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-08-16 16:59:24 ----A---- C:\WINDOWS\system32\NMAA.dll
2018-08-16 16:59:24 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2018-08-16 16:59:24 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2018-08-16 16:59:24 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-08-16 16:59:23 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-08-16 16:59:23 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-08-16 16:59:22 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-08-16 16:59:22 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-08-16 16:59:22 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-08-16 16:59:21 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-08-16 16:59:21 ----A---- C:\WINDOWS\system32\jscript.dll
2018-08-16 16:59:21 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-08-16 16:59:20 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-08-16 16:59:20 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-08-16 16:59:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-08-16 16:59:20 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2018-08-16 16:59:20 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-08-16 16:59:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-08-16 16:59:19 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-08-16 16:59:19 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-08-16 16:59:19 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-08-16 16:59:19 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-08-16 16:59:18 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-08-16 16:59:18 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-08-16 16:59:18 ----A---- C:\WINDOWS\system32\mos.dll
2018-08-16 16:59:18 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-08-16 16:59:17 ----A---- C:\WINDOWS\system32\WWAHost.exe
2018-08-16 16:59:17 ----A---- C:\WINDOWS\system32\msi.dll
2018-08-16 16:59:17 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2018-08-16 16:59:17 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-08-16 16:59:16 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-08-16 16:59:16 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-08-16 16:59:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-08-16 16:59:16 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-08-16 16:59:16 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-08-16 16:59:15 ----A---- C:\WINDOWS\system32\wininet.dll
2018-08-16 16:59:14 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-08-16 16:59:14 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-08-16 16:59:14 ----A---- C:\WINDOWS\system32\edgeangle.dll
2018-08-16 16:59:12 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-08-16 16:59:12 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-08-16 16:59:12 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-08-16 16:59:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-08-16 16:59:10 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-08-16 16:59:10 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-08-16 16:59:09 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-08-16 16:59:09 ----A---- C:\WINDOWS\system32\shell32.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-08-16 16:59:08 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\system32\MapsStore.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\system32\MapRouter.dll
2018-08-16 16:59:07 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2018-08-16 16:59:06 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-08-16 16:59:06 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-08-16 16:59:06 ----A---- C:\WINDOWS\system32\BingMaps.dll
2018-08-16 16:59:06 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-08-16 16:59:05 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-08-16 16:59:05 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-08-16 16:59:05 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-08-16 16:58:53 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-08-16 16:58:53 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-08-16 16:58:52 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-08-16 16:58:52 ----A---- C:\WINDOWS\system32\tquery.dll
2018-08-16 16:58:51 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-08-16 16:58:50 ----A---- C:\WINDOWS\system32\winresume.exe
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\winload.exe
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-08-16 16:58:49 ----A---- C:\WINDOWS\system32\ci.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\SYSWOW64\mcbuilder.exe
2018-08-16 16:58:48 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\system32\wsp_health.dll
2018-08-16 16:58:48 ----A---- C:\WINDOWS\system32\clusapi.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\policymanager.dll
2018-08-16 16:58:47 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-08-16 16:58:46 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-08-16 16:58:45 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-08-16 16:58:45 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-08-16 16:58:45 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-08-16 16:58:45 ----A---- C:\WINDOWS\system32\resutils.dll
2018-08-16 16:58:44 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-08-16 16:58:44 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll
2018-08-16 16:58:44 ----A---- C:\WINDOWS\system32\twinui.dll
2018-08-16 16:58:44 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2018-08-16 16:58:43 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-08-16 16:58:42 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-08-16 16:58:42 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-08-16 16:58:42 ----A---- C:\WINDOWS\system32\mssrch.dll
2018-08-16 16:58:42 ----A---- C:\WINDOWS\system32\InputService.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\provengine.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\msctf.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\dosvc.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\cdprt.dll
2018-08-16 16:58:41 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\system32\WFDSConMgrSvc.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2018-08-16 16:58:40 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2018-08-16 16:58:40 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2018-08-16 16:58:39 ----A---- C:\WINDOWS\system32\nettrace.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\system32\lpasvc.dll
2018-08-16 16:58:39 ----A---- C:\WINDOWS\system32\localspl.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-08-16 16:58:38 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\rdpserverbase.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2018-08-16 16:58:37 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\tdh.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\rsaenh.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\provops.dll
2018-08-16 16:58:37 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-08-16 16:58:36 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2018-08-16 16:58:36 ----A---- C:\WINDOWS\system32\profsvc.dll
2018-08-16 16:58:36 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-08-16 16:58:36 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2018-08-16 16:58:36 ----A---- C:\WINDOWS\system32\datamarketsvc.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\wldp.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\sysmain.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\services.exe
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\PushToInstall.dll
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2018-08-16 16:58:35 ----A---- C:\WINDOWS\system32\defragsvc.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\SYSWOW64\wldp.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.XamlHost.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\system32\rdpencom.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\system32\nshwfp.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\system32\nltest.exe
2018-08-16 16:58:34 ----A---- C:\WINDOWS\system32\hvhostsvc.dll
2018-08-16 16:58:34 ----A---- C:\WINDOWS\system32\drivers\scmbus.sys
2018-08-16 16:58:33 ----A---- C:\WINDOWS\SYSWOW64\cdprt.dll
2018-08-16 16:58:33 ----A---- C:\WINDOWS\system32\sppc.dll
2018-08-16 16:58:33 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2018-08-16 16:58:33 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-08-16 16:58:33 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\mssvp.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\kdnet.dll
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\drivers\winhv.sys
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2018-08-16 16:58:32 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Controls.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\raschap.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\WaaSAssessment.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\raschap.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\msiexec.exe
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\fontsub.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\EasPolicyManagerBrokerPS.dll
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\drivers\exfat.sys
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2018-08-16 16:58:31 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\SYSWOW64\t2embed.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\system32\t2embed.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\system32\hlink.dll
2018-08-16 16:58:30 ----A---- C:\WINDOWS\system32\drivers\winnat.sys
2018-08-16 16:58:30 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\OneCoreCommonProxyStub.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\SYSWOW64\enrollmentapi.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\WFDSConMgr.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\tzres.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\mssph.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\drivers\vmgid.sys
2018-08-16 16:58:29 ----A---- C:\WINDOWS\system32\atmlib.dll
2018-08-16 16:58:28 ----A---- C:\WINDOWS\system32\winshfhc.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\SYSWOW64\vcruntime140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\SYSWOW64\vccorlib140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\SYSWOW64\msvcp140_1.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\SYSWOW64\msvcp140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\SYSWOW64\concrt140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\system32\vcruntime140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\system32\vccorlib140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\system32\msvcp140_1.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\system32\msvcp140.dll
2018-07-30 09:15:16 ----A---- C:\WINDOWS\system32\concrt140.dll

======List of files/folders modified in the last 1 month======

2018-08-29 12:18:16 ----RD---- C:\Program Files
2018-08-29 12:18:06 ----D---- C:\WINDOWS\Temp
2018-08-29 11:40:27 ----HD---- C:\Program Files\WindowsApps
2018-08-29 11:35:47 ----D---- C:\WINDOWS\SoftwareDistribution
2018-08-29 11:35:47 ----D---- C:\Windows
2018-08-29 11:35:17 ----D---- C:\WINDOWS\system32\sru
2018-08-29 11:35:03 ----D---- C:\WINDOWS\system32\SleepStudy
2018-08-28 09:45:35 ----D---- C:\WINDOWS\System32
2018-08-28 09:45:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-08-28 09:45:34 ----D---- C:\WINDOWS\INF
2018-08-28 09:22:55 ----D---- C:\WINDOWS\Prefetch
2018-08-26 20:16:03 ----D---- C:\WINDOWS\system32\config
2018-08-26 20:13:53 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-08-26 20:13:41 ----AD---- C:\Program Files (x86)\TeamViewer
2018-08-26 20:13:40 ----D---- C:\WINDOWS\WinSxS
2018-08-26 19:23:02 ----D---- C:\WINDOWS\system32\catroot2
2018-08-26 18:00:00 ----D---- C:\WINDOWS\system32\LogFiles
2018-08-26 17:30:56 ----RD---- C:\WINDOWS\Microsoft.NET
2018-08-26 17:30:06 ----D---- C:\WINDOWS\Logs
2018-08-26 17:29:28 ----D---- C:\WINDOWS\CbsTemp
2018-08-24 09:44:19 ----D---- C:\WINDOWS\system32\Tasks
2018-08-23 08:33:48 ----SHDC---- C:\WINDOWS\Installer
2018-08-23 08:32:59 ----D---- C:\Program Files (x86)\Common Files
2018-08-23 08:29:55 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-08-21 13:53:57 ----D---- C:\WINDOWS\system32\NDF
2018-08-20 15:53:58 ----D---- C:\WINDOWS\LiveKernelReports
2018-08-20 15:29:08 ----RSD---- C:\WINDOWS\assembly
2018-08-20 15:22:42 ----D---- C:\WINDOWS\SysWOW64
2018-08-20 15:22:18 ----D---- C:\WINDOWS\system32\DriverStore
2018-08-18 09:39:36 ----D---- C:\ProgramData\Packages
2018-08-16 17:21:37 ----D---- C:\Users\Etas\AppData\Roaming\uTorrent
2018-08-16 17:21:30 ----D---- C:\WINDOWS\debug
2018-08-16 17:16:49 ----D---- C:\WINDOWS\system32\drivers
2018-08-16 17:15:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2018-08-16 17:15:17 ----D---- C:\WINDOWS\TextInput
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-08-16 17:15:17 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-08-16 17:15:16 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-08-16 17:15:10 ----SD---- C:\WINDOWS\system32\UNP
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\zu-ZA
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\yo-NG
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\xh-ZA
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\wo-SN
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\tn-ZA
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\ti-ET
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\ShellExperiences
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\rw-RW
2018-08-16 17:15:10 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-08-16 17:15:09 ----SD---- C:\WINDOWS\system32\F12
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\nso-ZA
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\migration
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\ig-NG
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\en-US
2018-08-16 17:15:09 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-08-16 17:15:08 ----SD---- C:\WINDOWS\system32\DiagSvcs
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\cs-CZ
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\Boot
2018-08-16 17:15:08 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-08-16 17:15:03 ----RD---- C:\WINDOWS\PrintDialog
2018-08-16 17:15:03 ----D---- C:\WINDOWS\ShellExperiences
2018-08-16 17:15:00 ----D---- C:\WINDOWS\bcastdvr
2018-08-16 17:15:00 ----D---- C:\Program Files (x86)\Windows Defender
2018-08-16 17:14:59 ----RD---- C:\Program Files\Windows Defender
2018-08-16 16:42:08 ----D---- C:\WINDOWS\system32\MRT
2018-08-16 16:42:00 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-08-06 17:19:36 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2018-07-30 143624]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2018-07-30 196112]
R1 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2018-07-30 110376]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2016-05-25 137280]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-07-14 414720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2016-10-24 72592]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2016-10-24 67984]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2016-10-24 355216]
R3 iaLPSS2_SPI;@oem33.inf,%iaLPSS2_SPI.SVCDESC%;Intel(R) Serial IO SPI Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_SPI.sys [2016-08-03 151864]
R3 iaLPSS2_UART2;@oem17.inf,%iaLPSS2_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [2016-08-03 283960]
R3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
R3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
R3 ibtusb;@oem11.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2017-01-14 253696]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\igdkmd64.sys [2017-02-28 11062752]
R3 IntcAudioBus;@oem42.inf,%IntcAudioBus.SVCDESC%;Sběrnice technologie Intel(R) Smart Sound; C:\WINDOWS\System32\drivers\IntcAudioBus.sys [2017-07-26 238184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2017-07-26 5882864]
R3 IntcDAud;@oem24.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2017-02-16 820752]
R3 IntcOED;@oem35.inf,%IntcOED.SVCDESC%;Technologie Intel(R) Smart Sound OED; C:\WINDOWS\System32\drivers\IntcOED.sys [2017-07-26 732776]
R3 LMDriver;@oem41.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2017-02-15 22320]
R3 MEIx64;@oem36.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-08-10 204912]
R3 Netwtw04;___ Intel(R) Wireless Adapter Driver for Windows 10 - 64 Bit; C:\WINDOWS\System32\drivers\Netwtw04.sys [2018-04-12 7689728]
R3 RadioShim;@oem41.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\WINDOWS\System32\drivers\RadioShim.sys [2017-02-15 15664]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 RTSUER;@oem38.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2016-10-26 418784]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 eelam;eelam; C:\WINDOWS\system32\DRIVERS\eelam.sys [2018-03-12 15872]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-08-03 128920]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2018-04-12 198144]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
S3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth handsfree; C:\WINDOWS\system32\DRIVERS\BthHfAud.sys [2018-04-12 48640]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2018-07-14 1069568]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-02-04 30264]
S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-02-04 47672]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-08-03 77608]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Ovladač přenosů Avrcp protokolu Microsoft Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [2018-04-12 46592]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-06-15 945568]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-03-21 83984]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_1336697;Uživatelská služba platformy připojených zařízení_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 ClickToRunSvc;Microsoft Office Click-to-Run Service; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-08-19 9644000]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHDCPSvc.exe [2017-02-28 480736]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2018-07-30 2330224]
R2 esifsvc;@oem27.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2016-11-23 2211448]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-03-21 640928]
R2 ibtsiva;@oem11.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\WINDOWS\system32\ibtsiva []
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\igfxCUIService.exe [2017-02-28 341472]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [2016-09-28 176416]
R2 OneSyncSvc_1336697;Hostitel synchronizace_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe []
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe []
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-03-21 157600]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-07-14 760888]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_41decbdb7f211d5c\IntelCpHeciSvc.exe [2017-02-28 303072]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-09 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 PimIndexMaintenanceSvc_1336697;Data kontaktů_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 Dashlane Upgrade Service;Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [2017-08-23 83992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_1336697;Uživatelská služba pro GameDVR a vysílání her_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_1336697;Služba pro podporu uživatelů Bluetooth_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_1336697;DevicePicker_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_1336697;Tok zařízení_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-08-03 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29 107848]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\iCLS\SocketHeciServer.exe [2016-05-24 974632]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_1336697;Služba zasílání zpráv_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-03-21 268704]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-07-30 216616]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_1336697;PrintWorkflow_1336697; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-06-08 976384]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S4 ssh-agent;OpenSSH Authentication Agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [2018-03-10 495616]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Tady je log, viděl jsem že to něco našlo což se divím že mi to prostě eset nezachytí ikdyž ho mám normalně zaplacený. Každopádně v rychlosti zatím žádná změna, bylo to vážné to co to zachytilo nebo nějaké maličkosti jenom?


# -------------------------------
# Malwarebytes AdwCleaner 7.2.2.0
# -------------------------------
# Build: 07-17-2018
# Database: 2018-08-24.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-29-2018
# Duration: 00:00:07
# OS: Windows 10 Home
# Cleaned: 16
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\defaultuser0\AppData\Local\Host App Service
Deleted C:\Users\Etas\AppData\Local\Host App Service

***** [ Files ] *****

Deleted C:\Windows\System32\Tasks_Migrated\App Explorer

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\App Explorer

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
Deleted HKCU\Software\Host App Service
Deleted HKU\S-1-5-20\Software\Host App Service
Deleted HKU\S-1-5-19\Software\Host App Service
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66AB4AC2-3619-484D-A4F6-95FDEE1D1880}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\App Explorer
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted HKLM\Software\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted HKLM\Software\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2745 octets] - [29/08/2018 12:47:48]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

OK. Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=154679 .

logy v archívu v příloze.

a druhy log

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-566837727-1131129368-1148289530-1001\...\MountPoints2: D - "D:\RunGame.exe"
HKU\S-1-5-21-566837727-1131129368-1148289530-1001\...\MountPoints2: {9f38b5bf-b73e-11e7-9e42-96f7d39731b4} - "E:\Setup.exe"
SearchScopes: HKU\S-1-5-21-566837727-1131129368-1148289530-1001 -> DefaultScope {8EBC6556-D930-466B-8424-49B126AB70E3} URL =
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {09F9D200-E4C3-4BF4-9D3C-A0F2B11EDEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.)
Task: {68690A97-A6A8-4E23-A682-731FAD2D88BA} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {8780B16F-1913-43DB-AAD1-AD94A698DA5D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.)

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

zasilám log

Fix result of Farbar Recovery Scan Tool (x64) Version: 23.08.2018
Ran by Etas (30-08-2018 15:09:04) Run:1
Running from C:\Users\Etas\Desktop
Loaded Profiles: Etas (Available Profiles: defaultuser0 & Etas)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-566837727-1131129368-1148289530-1001\...\MountPoints2: D - "D:\RunGame.exe"
HKU\S-1-5-21-566837727-1131129368-1148289530-1001\...\MountPoints2: {9f38b5bf-b73e-11e7-9e42-96f7d39731b4} - "E:\Setup.exe"
SearchScopes: HKU\S-1-5-21-566837727-1131129368-1148289530-1001 -> DefaultScope {8EBC6556-D930-466B-8424-49B126AB70E3} URL =
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {09F9D200-E4C3-4BF4-9D3C-A0F2B11EDEE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.)
Task: {68690A97-A6A8-4E23-A682-731FAD2D88BA} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {8780B16F-1913-43DB-AAD1-AD94A698DA5D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.)

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-566837727-1131129368-1148289530-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D" => removed successfully
"HKU\S-1-5-21-566837727-1131129368-1148289530-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f38b5bf-b73e-11e7-9e42-96f7d39731b4}" => removed successfully
HKLM\Software\Classes\CLSID\{9f38b5bf-b73e-11e7-9e42-96f7d39731b4} => not found
"HKU\S-1-5-21-566837727-1131129368-1148289530-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{09F9D200-E4C3-4BF4-9D3C-A0F2B11EDEE6}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09F9D200-E4C3-4BF4-9D3C-A0F2B11EDEE6}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{68690A97-A6A8-4E23-A682-731FAD2D88BA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68690A97-A6A8-4E23-A682-731FAD2D88BA}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8780B16F-1913-43DB-AAD1-AD94A698DA5D}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8780B16F-1913-43DB-AAD1-AD94A698DA5D}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8413184 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 42235005 B
Java, Flash, Steam htmlcache => 573 B
Windows/system/drivers => 1923894 B
Edge => 534325 B
Chrome => 516262519 B
Firefox => 195696 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 7560 B
LocalService => 0 B
NetworkService => 6656 B
NetworkService => 0 B
defaultuser0 => 6656 B
Etas => 6653835 B

RecycleBin => 0 B
EmptyTemp: => 549.6 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:09:45 ====

Smazáno. Nastala nějaká změna?

Ahoj, omlouvám se musel jsem nutně odjet na služebku, jasně všechno v pohodě bez problému a jako nové, posílám jako poděkování a kompenzaci částku na učet . Jako VS uvedu mou přezdívku. Díky moc

Nemáte zač a za příspěvek děkujeme!