VIRY.CZ

Dobrý deň, chcel by som vás poprosiť o pomoc, či radu s mojim záhadným problémom.
Po zapnuti PC sa všetko javí normalne, no ako nahle otvorim prieskumník tak okamžite začnu ikony v stavovom riadku blikať a tiež na ploche a v samotnom prieskumníku.
Používam W10 64
Za odpoveď ďakujem
Pripájam LOG:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Pe3k at 2018-11-06 21:11:10
Microsoft Windows 10 Education
System drive C: has 110 GB (65%) free of 170 GB
Total RAM: 8055 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:11:23, on 6. 11. 2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Users\barte\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\barte\AppData\Local\Viber\Viber.exe
C:\OBERON\SHARE\SYSTEM\OBERON Center.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe
C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe
C:\Program Files\trend micro\Pe3k.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O4 - HKLM\..\Run: [OBERON Center] "C:\OBERON\Share\System\OBERON Center.exe"
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [Launch SilverCrest STMS 2017 A1-K] C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe
O4 - HKLM\..\Run: [Launch SilverCrest STMS 2017 A1-M] C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\barte\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [EPLTarget\P0000000000000002] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE /EPT "EPLTarget\P0000000000000002" /M "L6170 Series"
O4 - HKCU\..\Run: [OpenVPN-GUI] C:\Program Files\OpenVPN\bin\openvpn-gui.exe
O4 - HKCU\..\Run: [Viber] "C:\Users\barte\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [EPLTarget\P0000000000000000] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE /EPT "EPLTarget\P0000000000000000" /M "L6170 Series" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPLTarget\P0000000000000000] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE /EPT "EPLTarget\P0000000000000000" /M "L6170 Series" (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: APLI Master AutoUpdater - Unknown owner - C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe
O23 - Service: @oem5.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\WINDOWS\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @oem6.inf,%fpCSEvtService_SvcDesc%;fpCSEvtSvc (fpCsEvtSvc) - Unknown owner - C:\WINDOWS\system32\fpCSEvtSvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP CASL Framework Service (hpqcaslwmiex) - HP - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
O23 - Service: @oem14.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: OpenVPNService - - C:\Program Files\OpenVPN\bin\openvpnserv2.exe
O23 - Service: OpenVPN Interactive Service (OpenVPNServiceInteractive) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: OpenVPN Legacy Service (OpenVPNServiceLegacy) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Corel License Validation Service V2, Powered by arvato (PSI_SVC_2) - arvato digital services llc - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: UsbClientService - Unknown owner - C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
O23 - Service: @oem6.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 12753 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-4b35059f-9302-473e-8ecb-3b72d9d833af -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-727f6e58-97a9-45bd-9552-0060fe328792 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-3887f465-52c1-414f-834a-ad128d93d8ad -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cbb50c66-2bf2-40ec-99ba-4f3161804846 -LifetimeId:98b14ba9-da51-4dbd-b582-8327b181dd1f -DeviceGroupId:
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2dd58261-5fad-4189-ad23-233166bb1542 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-8d44be51-927c-4a28-869d-3c20f0edb5eb -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-61f26315-e843-4a04-b798-45741c68d22e -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5ceb207e-7d48-419e-956e-b5b867bba61a -LifetimeId:6c49ff39-2db8-434e-8aa2-f50f1709ef27 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SensorService
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SensrSvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
dashost.exe {d29a0cdb-36f2-4aca-b0fc0de78012cc47}
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
C:\WINDOWS\system32\svchost.exe -k LocalService -p
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
"C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe" -runas_service
C:\WINDOWS\system32\EscSvc64.exe


C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
c:\windows\system32\svchost.exe -k localservice -s W32Time

c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc

c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-90474e7c-3e73-4da9-b7f6-72b379309e04 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-121573f5-fa66-4983-8429-4415a66e6d64 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-54a1d74d-cdca-4c38-a5c9-bafa8a79d286 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a275391b-3415-4ce1-8a7e-21b52363968d -LifetimeId:091694e7-a843-4845-ad2e-a6e2aa74ae81 -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DsSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe "
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"ctfmon.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer13_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer13_Logfile.log
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Users\barte\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\OpenVPN\bin\openvpn-gui.exe
"C:\Users\barte\AppData\Local\Viber\Viber.exe" StartMinimized
"C:\OBERON\SHARE\SYSTEM\OBERON Center.exe"
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe"
"C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\OpenWith.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\barte\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\barte\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\barte\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=70.0.3538.77 --initial-client-data=0x1ec,0x1f0,0x1f4,0x1e8,0x1f8,0x7ffbda7354d0,0x7ffbda7354e0,0x7ffbda7354f0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=7480 --on-initialized-event-handle=664 --parent-handle=668 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=11418207320522972224 --mojo-platform-channel-handle=1560 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --service-pipe-token=8888137477262960657 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8888137477262960657 --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2988 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --service-pipe-token=4465689353482170053 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4465689353482170053 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --service-pipe-token=547605277080964079 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=547605277080964079 --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --service-pipe-token=14037843258019733961 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14037843258019733961 --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1512,9785452987461799663,10567074572829304275,131072 --service-pipe-token=6971483305762920713 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6971483305762920713 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6220 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe28_ Global\UsGthrCtrlFltPipeMssGthrPipe28 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 748 752 760 8192 756
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x638
"C:\Users\barte\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}.job - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE /EXE:"{57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}" /F:"Update"
C:\WINDOWS\tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}.job - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE /EXE:"{BA98BC21-3F11-4A12-8112-18230C58A2D2}" /F:"Update"
C:\WINDOWS\tasks\HPCeeScheduleForPe3k.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForPe3k (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31 226984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2015-07-31 2165976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2015-07-31 1512152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\barte\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-10-17 1538656]
"EPLTarget\P0000000000000002"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE [2016-07-14 418000]
"OpenVPN-GUI"=C:\Program Files\OpenVPN\bin\openvpn-gui.exe [2017-07-14 638592]
"Viber"=C:\Users\barte\AppData\Local\Viber\Viber.exe [2018-10-22 36762184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"OBERON Center"=C:\OBERON\Share\System\OBERON Center.exe [2018-01-04 1701096]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2016-11-18 1151872]
"Launch SilverCrest STMS 2017 A1-K"=C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe [2011-02-17 1424384]
"Launch SilverCrest STMS 2017 A1-M"=C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe [2011-02-17 865280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-11-06 21:11:10 ----D---- C:\rsit
2018-11-06 21:11:10 ----D---- C:\Program Files\trend micro
2018-11-06 21:04:15 ----D---- C:\Users\barte\AppData\Roaming\Macromedia
2018-11-04 09:21:22 ----D---- C:\WINDOWS\Minidump
2018-11-03 21:13:10 ----HD---- C:\OneDriveTemp
2018-11-01 21:45:38 ----A---- C:\WINDOWS\system32\E_YLMBSRE.DLL
2018-11-01 17:17:45 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-01 17:14:24 ----D---- C:\WINDOWS\system32\appmgmt
2018-11-01 17:13:49 ----A---- C:\Program Files (x86)\CMS Uninstall Log.txt
2018-11-01 17:12:30 ----HD---- C:\$SysReset
2018-11-01 16:49:52 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\SYSWOW64\ig7icd32.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxLHM.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxHK.exe
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxext.exe
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxexps.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxEM.exe
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDI.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxDH.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igdde64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\ig7icd64.dll
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\drivers\IntcDAud.sys
2018-11-01 16:39:15 ----A---- C:\WINDOWS\system32\difx64.exe
2018-11-01 16:03:37 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-10-26 21:09:11 ----D---- C:\ProgramData\Garmin
2018-10-26 21:08:45 ----D---- C:\Program Files\DIFX
2018-10-26 21:08:29 ----D---- C:\Users\barte\AppData\Roaming\Garmin
2018-10-26 21:08:29 ----D---- C:\Program Files (x86)\Garmin
2018-10-10 17:14:24 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14:22 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-10-10 17:14:21 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-10-10 17:14:17 ----A---- C:\WINDOWS\system32\shell32.dll
2018-10-10 17:14:16 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-10-10 17:14:16 ----A---- C:\WINDOWS\system32\wininet.dll
2018-10-10 17:14:15 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-10-10 17:14:15 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-10-10 17:14:15 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-10-10 17:14:15 ----A---- C:\WINDOWS\system32\InputService.dll
2018-10-10 17:14:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-10-10 17:14:14 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-10-10 17:14:14 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-10-10 17:14:14 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-10-10 17:14:14 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-10-10 17:14:13 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-10-10 17:14:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\system32\twinui.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\system32\msftedit.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-10-10 17:14:12 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\wmp.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\dosvc.dll
2018-10-10 17:14:11 ----A---- C:\WINDOWS\system32\appraiser.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\system32\winmsipc.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\system32\msctf.dll
2018-10-10 17:14:10 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\aitstatic.exe
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\aepic.dll
2018-10-10 17:14:09 ----A---- C:\WINDOWS\system32\aeinv.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\wsp_health.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\generaltel.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\devinv.dll
2018-10-10 17:14:08 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-10-10 17:14:07 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-10-10 17:14:07 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\WWAHost.exe
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\kerberos.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\invagent.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-10-10 17:14:07 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\fveapi.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\wpnapps.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\winlogon.exe
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\win32spl.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\usocore.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\ubpm.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\schannel.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\pcasvc.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\fveapi.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\clusapi.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-10-10 17:14:06 ----A---- C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\resutils.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\dafBth.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\cryptui.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\AppVIntegration.dll
2018-10-10 17:14:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.XamlHost.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\rdpserverbase.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\winresume.exe
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\winload.exe
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\sechost.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\psmsrv.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\MusNotification.exe
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\evr.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\drivers\exfat.sys
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\bthserv.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\AppVPolicy.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\AppVOrchestration.dll
2018-10-10 17:14:04 ----A---- C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\winipcfile.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\user32.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\TransportDSA.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\scksp.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\mfps.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\das.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\basecsp.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVManifest.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\AppVCatalog.dll
2018-10-10 17:14:03 ----A---- C:\WINDOWS\system32\advapi32.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\winipcfile.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\mcbuilder.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\fdBth.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\thumbcache.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\themeui.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVStreamMap.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVStreamingUX.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVShNotify.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVNice.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\AppVDllSurrogate.exe
2018-10-10 17:14:02 ----A---- C:\WINDOWS\system32\aclui.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Proximity.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\INETRES.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\SYSWOW64\dtdump.exe
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\wmpshell.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\utcutil.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\SCardBi.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\runexehelper.exe
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\rdpshell.exe
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\rdpinit.exe
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\ProximityService.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\itss.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\INETRES.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\inetcomm.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\fdBth.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\drivers\Dumpstorport.sys
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\certprop.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\bthci.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\bdesvc.dll
2018-10-10 17:14:01 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll

======List of files/folders modified in the last 1 month======

2018-11-06 21:11:17 ----D---- C:\WINDOWS\Temp
2018-11-06 21:11:17 ----D---- C:\WINDOWS\Prefetch
2018-11-06 21:11:10 ----RD---- C:\Program Files
2018-11-06 21:04:17 ----D---- C:\Users\barte\AppData\Roaming\vlc
2018-11-06 20:55:25 ----HD---- C:\Program Files\WindowsApps
2018-11-06 20:54:54 ----D---- C:\WINDOWS\AppReadiness
2018-11-06 20:50:28 ----D---- C:\WINDOWS\system32\sru
2018-11-06 20:49:47 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-11-06 20:49:28 ----D---- C:\WINDOWS\LiveKernelReports
2018-11-04 19:07:13 ----SHD---- C:\WINDOWS\Installer
2018-11-04 19:06:51 ----D---- C:\WINDOWS\SysWOW64
2018-11-04 19:06:35 ----D---- C:\WINDOWS\system32\Tasks
2018-11-04 18:04:00 ----D---- C:\WINDOWS\system32\SleepStudy
2018-11-04 12:00:02 ----D---- C:\WINDOWS\system32\LogFiles
2018-11-04 10:44:26 ----D---- C:\WINDOWS\Logs
2018-11-04 10:44:24 ----D---- C:\Windows
2018-11-04 10:44:09 ----SHD---- C:\System Volume Information
2018-11-04 10:44:05 ----RD---- C:\WINDOWS\Microsoft.NET
2018-11-04 10:43:56 ----D---- C:\WINDOWS\CbsTemp
2018-11-04 09:28:42 ----D---- C:\WINDOWS\System32
2018-11-04 09:28:42 ----D---- C:\WINDOWS\INF
2018-11-04 09:28:42 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-04 09:21:25 ----D---- C:\Program Files (x86)\TeamViewer
2018-11-04 09:21:22 ----D---- C:\ProgramData\Synaptics
2018-11-03 09:18:00 ----D---- C:\WINDOWS\system32\catroot2
2018-11-03 08:34:10 ----D---- C:\WINDOWS\system32\config
2018-11-01 21:47:13 ----D---- C:\WINDOWS\Tasks
2018-11-01 21:45:50 ----D---- C:\WINDOWS\system32\DriverStore
2018-11-01 21:45:50 ----D---- C:\WINDOWS\system32\CatRoot
2018-11-01 21:44:42 ----HD---- C:\ProgramData
2018-11-01 17:46:58 ----RSD---- C:\WINDOWS\assembly
2018-11-01 17:46:31 ----D---- C:\WINDOWS\WinSxS
2018-11-01 17:17:37 ----D---- C:\Program Files (x86)\WinCDEmu
2018-11-01 17:16:00 ----D---- C:\ProgramData\Ashampoo
2018-11-01 17:14:01 ----D---- C:\Program Files (x86)\CMS
2018-11-01 17:13:49 ----RD---- C:\Program Files (x86)
2018-11-01 16:49:35 ----D---- C:\WINDOWS\system32\drivers
2018-11-01 16:39:15 ----D---- C:\Swsetup
2018-11-01 16:39:08 ----A---- C:\WINDOWS\SYSWOW64\opencl.dll
2018-11-01 16:39:08 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2018-11-01 16:39:07 ----A---- C:\WINDOWS\system32\igfxTray.exe
2018-11-01 16:39:02 ----A---- C:\WINDOWS\system32\IccLibDll_x64.dll
2018-11-01 15:58:10 ----D---- C:\WINDOWS\system32\drivers\wd
2018-11-01 15:48:52 ----D---- C:\Users\barte\AppData\Roaming\ViberPC
2018-10-26 21:12:29 ----D---- C:\ProgramData\Packages
2018-10-26 21:12:03 ----D---- C:\ProgramData\Epson
2018-10-17 19:32:12 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2018-10-10 20:37:46 ----D---- C:\Users\barte\AppData\Roaming\GHISLER
2018-10-10 17:36:55 ----D---- C:\WINDOWS\system32\MRT
2018-10-10 17:31:08 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-10-10 17:22:05 ----D---- C:\WINDOWS\TextInput
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\zu-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\yo-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\xh-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\wo-SN
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\wbem
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\tn-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ti-ET
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ShellExperiences
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\rw-RW
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\nso-ZA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\migration
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ig-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\en-US
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\Boot
2018-10-10 17:22:05 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-10-10 17:22:05 ----D---- C:\WINDOWS\PolicyDefinitions
2018-10-10 17:22:04 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-10-10 17:22:04 ----RD---- C:\Program Files\Windows Defender
2018-10-10 17:22:04 ----D---- C:\WINDOWS\bcastdvr
2018-10-10 17:22:04 ----D---- C:\WINDOWS\apppatch
2018-10-10 17:22:04 ----D---- C:\Program Files\Windows Media Player
2018-10-10 17:22:04 ----D---- C:\Program Files\internet explorer
2018-10-10 17:22:04 ----D---- C:\Program Files (x86)\Windows Media Player
2018-10-10 17:22:04 ----D---- C:\Program Files (x86)\Windows Defender
2018-10-10 17:22:04 ----D---- C:\Program Files (x86)\Internet Explorer
2018-10-10 16:48:15 ----D---- C:\WINDOWS\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;@oem14.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2012-09-07 31040]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2018-07-11 27552]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-07-14 414720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R3 Accelerometer;@oem14.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2012-09-07 43328]
R3 AgereSoftModem;@mdmags64.inf,%FullProductName%;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\agrsm64.sys [2018-04-12 1146880]
R3 bcbtums;@oem18.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2018-07-11 186152]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2018-04-12 85504]
R3 busenum;@oem31.inf,%busenum.SVCDESC%;Synology Virtual USB Hub; C:\WINDOWS\System32\drivers\busenum.sys [2012-08-03 57824]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 e1cexpress;@oem19.inf,%e1cExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [2018-07-11 472016]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2018-11-01 3802600]
R3 InputFilter_Hid_FlexDef2b;@oem27.inf,%HIDUASServiceDesc%;Siliten HID Devices(FlexDef2b) Driver Service; C:\WINDOWS\System32\drivers\InputFilter_FlexDef2b.sys [2010-06-19 17920]
R3 IntcDAud;@oem33.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2018-11-01 463112]
R3 iwdbus;@oem8.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 MEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2017-02-20 194320]
R3 MouFilter_Mou_FlexDef4;@oem28.inf,%HIDUASServiceDesc%;HID Mouse(FlexDef4) Driver Service; C:\WINDOWS\System32\drivers\MouFilter_FlexDef4.sys [2010-10-20 15360]
R3 NETwNe64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\WINDOWS\System32\drivers\NETwew01.sys [2018-04-12 3343872]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 SNP2UVCW10;@oem20.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvcW10.sys [2018-07-11 2530360]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-08-03 128920]
S2 npf;npf; C:\WINDOWS\System32\drivers\npf.sys []
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 BazisVirtualCDBus;@oem30.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-09-28 172376]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2018-09-08 1096704]
S3 btwampfl;@oem18.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2018-07-11 213312]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i63x64.sys [2018-04-12 524800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-09-20 76088]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 intaud_WaveExtensible;@oem7.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-12-01 50160]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ptun0901;TAP Adapter V9 for Private Tunnel; C:\WINDOWS\System32\drivers\ptun0901.sys [2016-06-15 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-07-11 945568]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 smbdirect;smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [2018-04-12 152064]
S3 SNP2UVC;@oem2.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2015-06-30 2599624]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 APLI Master AutoUpdater;APLI Master AutoUpdater; C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe [2011-10-24 167936]
R2 BcmBtRSupport;@oem5.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-10-01 2286848]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_61f87367;Connected Devices Platform User Service_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 EpsonScanSvc;Epson Scanner Service; C:\WINDOWS\system32\EscSvc64.exe [2017-03-10 145224]
R2 hpsrv;@oem14.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2012-09-07 33600]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2018-06-13 333688]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-07-12 319096]
R2 OneSyncSvc_61f87367;Sync Host_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 osrss;@%systemroot%\system32\osrss.dll,-500; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 PSI_SVC_2;Corel License Validation Service V2, Powered by arvato; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2014-04-30 277360]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-07-14 760888]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-07-11 43648]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 PimIndexMaintenanceSvc_61f87367;Kontaktné údaje_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 fpCsEvtSvc;@oem6.inf,%fpCSEvtService_SvcDesc%;fpCSEvtSvc; C:\WINDOWS\system32\fpCSEvtSvc.exe [2018-07-11 22528]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 OpenVPNServiceInteractive;OpenVPN Interactive Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_61f87367;GameDVR and Broadcast User Service_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_61f87367;Služba podpory používateľov rozhrania Bluetooth_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_61f87367;CaptureService_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2018-11-01 280696]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_61f87367;DevicePicker_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_61f87367;DevicesFlow_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-08-03 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11 153168]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-02-13 136120]
S3 hpqcaslwmiex;HP CASL Framework Service; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [2016-06-03 1031704]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_61f87367;MessagingService_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 OpenVPNService;OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [2016-11-25 15872]
S3 OpenVPNServiceLegacy;OpenVPN Legacy Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2017-07-14 72832]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-07-31 242864]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_61f87367;PrintWorkflow_61f87367; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-07-15 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-07-11 826776]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]

-----------------EOF-----------------

Zdravím!
Zajímavý problém. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Ďakujem za reakciu...
Tak som to spustil a toto je asi ten log:

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-11-05.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-06-2018
# Duration: 00:00:01
# OS: Windows 10 Education
# Cleaned: 7
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{E7BC34A0-BA86-11CF-84B1-CBC2DA68BF6C}
Deleted HKLM\Software\Classes\TypeLib\{E7BC34A0-BA86-11CF-84B1-CBC2DA68BF6C}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{E7BC34A1-BA86-11CF-84B1-CBC2DA68BF6C}
Deleted HKLM\Software\Classes\Interface\{E7BC34A1-BA86-11CF-84B1-CBC2DA68BF6C}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted Search
Deleted SweetIM Search
Deleted SweetIM Search

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1754 octets] - [06/11/2018 22:05:19]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

OK. Nyní dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=154679 .

Tu je ten log FRST.
Druhý v dalšej správe.
Ďakujem

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07.11.2018
Ran by Pe3k (administrator) on PB-ELITEBOOK (08-11-2018 20:23:50)
Running from C:\Users\barte\Downloads
Loaded Profiles: Pe3k (Available Profiles: Pe3k)
Platform: Windows 10 Education Version 1803 17134.345 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Home) C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Windows\System32\fpCSEvtSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Viber Media S.à r.l.) C:\Users\barte\AppData\Local\Viber\Viber.exe
(EXALOGIC) C:\OBERON\SHARE\SYSTEM\OBERON Center.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Siliten) C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe
(Siliten) C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM-x32\...\Run: [OBERON Center] => C:\OBERON\Share\System\OBERON Center.exe [1701096 2018-01-04] (EXALOGIC)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1151872 2016-11-18] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Launch SilverCrest STMS 2017 A1-K] => C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe [1424384 2011-02-17] (Siliten)
HKLM-x32\...\Run: [Launch SilverCrest STMS 2017 A1-M] => C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe [865280 2011-02-17] (Siliten)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [EPLTarget\P0000000000000002] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE [418000 2016-07-14] (Seiko Epson Corporation)
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [Viber] => C:\Users\barte\AppData\Local\Viber\Viber.exe [36762184 2018-10-22] (Viber Media S.à r.l.)
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\MountPoints2: {ae860742-9c0f-11e8-9f8a-b8763fdb167b} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE [418000 2016-07-14] (Seiko Epson Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{6971d900-6771-496f-93ed-d5a41d97fbf8}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-502565617-607509685-159583452-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-502565617-607509685-159583452-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2018-07-15] [Legacy] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-07-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-07-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-10-06] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.sk/
CHR StartupUrls: Default -> "hxxp://www.google.sk/"
CHR Profile: C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default [2018-11-08]
CHR Extension: (Prezentácie) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-07-11]
CHR Extension: (3DTin) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\algoakekcdmbbikdjgjdahbfihboglmi [2018-07-11]
CHR Extension: (Dokumenty) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-07-11]
CHR Extension: (Disk Google) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-11]
CHR Extension: (YouTube) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-07-11]
CHR Extension: (Adobe Acrobat) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-07-18]
CHR Extension: (Tabuľky) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-07-11]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-02]
CHR Extension: (Flash Control) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdgadgplbbdjlbjgdociahdlmbglfeen [2018-07-11]
CHR Extension: (IE Tab) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2018-11-01]
CHR Extension: (Ubiquiti Device Discovery Tool) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmpigflbjeapnknladcfphgkemopofig [2018-09-16]
CHR Extension: (Nástroj na obnovenie Chromebooku) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndclpdbaamdhonoechobihbbiimdgai [2018-07-11]
CHR Extension: (Tiësto) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2018-07-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-11]
CHR Extension: (Gmail) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-07-11]
CHR Extension: (Chrome Media Router) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-26]
CHR HKU\S-1-5-21-502565617-607509685-159583452-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 APLI Master AutoUpdater; C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe [167936 2011-10-24] (Home) [File not signed]
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2017-03-10] (Seiko Epson Corporation)
R2 fpCsEvtSvc; C:\WINDOWS\system32\fpCSEvtSvc.exe [22528 2018-07-11] ()
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [319096 2016-07-12] (Intel Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
S2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [256224 2017-09-06] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11644656 2018-09-10] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248856 2018-05-11] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [82944 2018-07-11] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-11-01] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-11-01] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [472016 2018-07-11] (Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-07-11] (REALiX(tm))
R3 InputFilter_Hid_FlexDef2b; C:\WINDOWS\System32\drivers\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R3 MouFilter_Mou_FlexDef4; C:\WINDOWS\System32\drivers\MouFilter_FlexDef4.sys [15360 2010-10-20] (Siliten)
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2018-04-12] (Intel Corporation)
S2 npf; C:\Windows\SysWOW64\drivers\npf.sys [36600 2014-10-22] (Riverbed Technology, Inc.)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [152064 2018-04-12] (Microsoft Corporation)
S3 SNP2UVC; C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2599624 2015-06-30] (Sonix Tech. Co., Ltd.)
R3 SNP2UVCW10; C:\WINDOWS\system32\DRIVERS\snp2uvcW10.sys [2530360 2018-07-11] (Sonix Tech. Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46184 2018-11-01] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [328696 2018-11-01] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60408 2018-11-01] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [32832 2018-07-11] (HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-08 20:23 - 2018-11-08 20:24 - 000017545 _____ C:\Users\barte\Downloads\FRST.txt
2018-11-08 20:23 - 2018-11-08 20:23 - 000000000 ____D C:\FRST
2018-11-08 20:22 - 2018-11-08 20:22 - 002415616 _____ (Farbar) C:\Users\barte\Downloads\FRST64.exe
2018-11-08 20:20 - 2018-11-08 20:20 - 000000000 ___HD C:\OneDriveTemp
2018-11-06 22:05 - 2018-11-06 22:06 - 000000000 ____D C:\AdwCleaner
2018-11-06 22:01 - 2018-11-06 22:01 - 007592144 _____ (Malwarebytes) C:\Users\barte\Desktop\adwcleaner_7.2.4.0.exe
2018-11-06 21:54 - 2018-11-06 21:54 - 000000000 ____D C:\Users\barte\Downloads\NWA1123-ACv2_5.35(ABEL.4)C0
2018-11-06 21:52 - 2018-11-06 21:53 - 016336827 _____ C:\Users\barte\Downloads\NWA1123-ACv2_5.35(ABEL.4)C0.zip
2018-11-06 21:11 - 2018-11-06 21:11 - 000000000 ____D C:\rsit
2018-11-06 21:11 - 2018-11-06 21:11 - 000000000 ____D C:\Program Files\trend micro
2018-11-06 21:10 - 2018-11-06 21:10 - 001222144 _____ C:\Users\barte\Downloads\RSITx64.exe
2018-11-06 21:04 - 2018-11-06 21:04 - 000000000 ____D C:\Users\barte\AppData\Roaming\Macromedia
2018-11-06 21:02 - 2018-11-06 21:02 - 019592036 _____ C:\Users\barte\Downloads\Banská Bystrica_Tarty_Bratislava.mp4
2018-11-04 11:42 - 2018-11-04 21:34 - 000000000 ____D C:\Users\barte\Desktop\MANUAL
2018-11-04 09:21 - 2018-11-04 10:44 - 000000000 ____D C:\WINDOWS\Minidump
2018-11-01 21:47 - 2018-11-04 09:21 - 000000945 _____ C:\WINDOWS\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}.job
2018-11-01 21:47 - 2018-11-01 21:47 - 000004140 _____ C:\WINDOWS\System32\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}
2018-11-01 21:47 - 2018-11-01 21:47 - 000001453 _____ C:\Users\Public\Desktop\Príručky EPSON.lnk
2018-11-01 21:46 - 2018-11-04 09:21 - 000000945 _____ C:\WINDOWS\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}.job
2018-11-01 21:46 - 2018-11-01 21:46 - 000004140 _____ C:\WINDOWS\System32\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}
2018-11-01 21:45 - 2017-07-14 04:13 - 000184832 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\E_YLMBSRE.DLL
2018-11-01 17:25 - 2018-11-01 17:25 - 000010889 _____ C:\Users\barte\Downloads\[SkT]Lovec__Zimni_valka___The_Huntsman_Winter's_War_(Extended_Edition)(2016)(CZ)_=_CSFD_59%.torrent
2018-11-01 17:17 - 2018-11-01 17:17 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-01 17:14 - 2018-11-01 17:14 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2018-11-01 17:13 - 2018-11-01 17:14 - 000024983 _____ C:\Program Files (x86)\CMS Uninstall Log.txt
2018-11-01 17:12 - 2018-11-01 17:12 - 000000000 ___HD C:\$SysReset
2018-11-01 17:04 - 2018-11-01 17:04 - 000388608 _____ (Trend Micro Inc.) C:\Users\barte\Downloads\hijackthis.exe
2018-11-01 16:55 - 2018-11-01 16:55 - 000045040 _____ C:\Users\barte\Downloads\[SkT]Tajny_zivot_mazlicku___The_Secret_Life_of_Pets_(2016)(CZ_SK_EN)[1080p]_=_CSFD_67%.torrent
2018-11-01 16:49 - 2018-11-01 16:49 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2018-11-01 16:40 - 2018-11-01 16:40 - 000000640 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2018-11-01 16:39 - 2018-11-01 16:39 - 022914048 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 017846264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 008522232 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 006509048 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2018-11-01 16:39 - 2018-11-01 16:39 - 002035712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 001995256 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 001794560 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 001766904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 001155992 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 001151840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000680960 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000530552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000463112 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2018-11-01 16:39 - 2018-11-01 16:39 - 000385528 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000380408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000374784 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000330232 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000295416 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000293368 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000280696 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000264184 _____ C:\WINDOWS\system32\igfxCPL.cpl
2018-11-01 16:39 - 2018-11-01 16:39 - 000261120 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000247416 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000229880 _____ C:\WINDOWS\system32\igdde64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000229656 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000218112 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000199088 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000195192 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000194360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000193536 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000191480 _____ C:\WINDOWS\SysWOW64\igdde32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000191476 _____ C:\WINDOWS\system32\resTHA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000184036 _____ C:\WINDOWS\system32\resELL.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000179828 _____ C:\WINDOWS\system32\resRUS.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000169368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000165460 _____ C:\WINDOWS\system32\resARA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000164948 _____ C:\WINDOWS\system32\resJPN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000164884 _____ C:\WINDOWS\system32\resHEB.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000163840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000160260 _____ C:\WINDOWS\system32\resHUN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000160196 _____ C:\WINDOWS\system32\resFRA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158532 _____ C:\WINDOWS\system32\resKOR.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158388 _____ C:\WINDOWS\system32\resDEU.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158356 _____ C:\WINDOWS\system32\resITA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158148 _____ C:\WINDOWS\system32\resROM.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158052 _____ C:\WINDOWS\system32\resESN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157652 _____ C:\WINDOWS\system32\resPLK.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157492 _____ C:\WINDOWS\system32\resSKY.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157332 _____ C:\WINDOWS\system32\resNLD.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156708 _____ C:\WINDOWS\system32\resPTB.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156628 _____ C:\WINDOWS\system32\resCSY.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156596 _____ C:\WINDOWS\system32\resTRK.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156420 _____ C:\WINDOWS\system32\resPTG.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156280 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000155972 _____ C:\WINDOWS\system32\resFIN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000155540 _____ C:\WINDOWS\system32\resHRV.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000155124 _____ C:\WINDOWS\system32\resSVE.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000154964 _____ C:\WINDOWS\system32\resSLV.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000154004 _____ C:\WINDOWS\system32\resNOR.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000153508 _____ C:\WINDOWS\system32\resDAN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000152164 _____ C:\WINDOWS\system32\resENU.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000150404 _____ C:\WINDOWS\system32\resCHT.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000149524 _____ C:\WINDOWS\system32\resCHS.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000095224 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000078328 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000072704 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000068600 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000044025 _____ C:\WINDOWS\system32\iglhxo64.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000043816 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000043494 _____ C:\WINDOWS\system32\iglhxc64.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000043298 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000043256 _____ C:\WINDOWS\system32\iglhxg64.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000042079 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000040712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000039424 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000019456 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000019448 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000018944 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000018944 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000013816 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000002582 _____ C:\WINDOWS\system32\iglhxs64.vp
2018-11-01 16:39 - 2018-11-01 16:39 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2018-11-01 16:13 - 2018-11-01 16:13 - 003830359 _____ C:\Users\barte\Downloads\HUAWEI ME909u-521 LTE LGA Module Application Guide-%28V100R002_03%2C English%29.pdf
2018-11-01 16:03 - 2018-09-04 23:36 - 001476904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-10-26 22:18 - 2018-10-26 22:21 - 162125811 _____ C:\Users\barte\Downloads\freemapSKtopo.exe
2018-10-26 22:07 - 2018-10-26 22:09 - 173976036 _____ C:\Users\barte\Downloads\freemapSKtopo.gmapsupp.latin1.zip
2018-10-26 21:58 - 2018-10-26 22:00 - 173891389 _____ C:\Users\barte\Downloads\freemapSKtopo.gmapsupp.zip
2018-10-26 21:54 - 2018-10-26 21:54 - 000000000 ____D C:\Users\barte\Downloads\slovakia_garmin
2018-10-26 21:42 - 2018-10-26 21:45 - 112121875 _____ C:\Users\barte\Downloads\slovakia_garmin.zip
2018-10-26 21:40 - 2018-10-26 21:41 - 061095936 _____ C:\Users\barte\Downloads\TOPO4.img
2018-10-26 21:38 - 2018-11-03 22:02 - 000007623 _____ C:\Users\barte\AppData\Local\Resmon.ResmonCfg
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\Documents\Zariadenie Garmin
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Local\GARMIN_Corp
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Local\Garmin
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\ProgramData\Garmin
2018-10-26 21:08 - 2018-11-01 17:14 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-10-26 21:08 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Roaming\Garmin
2018-10-26 21:08 - 2018-10-26 21:08 - 000000000 ____D C:\Program Files\DIFX
2018-10-26 21:03 - 2018-10-26 21:04 - 000000000 ____D C:\Users\barte\AppData\Local\Viber
2018-10-10 17:14 - 2018-09-21 10:23 - 000257848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001786168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001626936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001422648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001038136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000399672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000228152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000034304 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2018-10-10 17:14 - 2018-09-21 10:18 - 021386888 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-10-10 17:14 - 2018-09-21 10:01 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-10-10 17:14 - 2018-09-21 09:22 - 020381784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-10-10 17:14 - 2018-09-21 09:12 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-10-10 17:14 - 2018-09-21 05:14 - 000661056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-10-10 17:14 - 2018-09-21 05:13 - 000480568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-10-10 17:14 - 2018-09-21 05:12 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-10-10 17:14 - 2018-09-21 05:11 - 000753056 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 004790160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 001427968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 001062920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-10-10 17:14 - 2018-09-21 05:09 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 001456720 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-10-10 17:14 - 2018-09-21 05:08 - 001257864 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-10-10 17:14 - 2018-09-21 05:08 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-10-10 17:14 - 2018-09-21 05:08 - 000982600 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-10-10 17:14 - 2018-09-21 05:08 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-10-10 17:14 - 2018-09-21 05:08 - 000261008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-10-10 17:14 - 2018-09-21 05:07 - 000604664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-10-10 17:14 - 2018-09-21 04:58 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-10-10 17:14 - 2018-09-21 04:57 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-10-10 17:14 - 2018-09-21 04:57 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-10-10 17:14 - 2018-09-21 04:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-10-10 17:14 - 2018-09-21 04:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-10-10 17:14 - 2018-09-21 04:53 - 001006080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-10-10 17:14 - 2018-09-21 04:43 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-10-10 17:14 - 2018-09-21 04:42 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-10-10 17:14 - 2018-09-21 04:41 - 003396096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-10-10 17:14 - 2018-09-21 04:40 - 002368000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-10-10 17:14 - 2018-09-21 04:38 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-10-10 17:14 - 2018-09-21 04:38 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-10-10 17:14 - 2018-09-21 04:37 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 001034240 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-10-10 17:14 - 2018-09-20 10:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-10-10 17:14 - 2018-09-20 10:37 - 001634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-10-10 17:14 - 2018-09-20 10:23 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-10-10 17:14 - 2018-09-20 10:22 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-10-10 17:14 - 2018-09-20 10:19 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-10-10 17:14 - 2018-09-20 10:18 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-10-10 17:14 - 2018-09-20 10:18 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-10-10 17:14 - 2018-09-20 10:18 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2018-10-10 17:14 - 2018-09-20 10:17 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2018-10-10 17:14 - 2018-09-20 10:16 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2018-10-10 17:14 - 2018-09-20 09:46 - 001454440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-10-10 17:14 - 2018-09-20 09:35 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-10-10 17:14 - 2018-09-20 09:34 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-10-10 17:14 - 2018-09-20 09:30 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-10-10 17:14 - 2018-09-20 09:29 - 002891776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-10-10 17:14 - 2018-09-20 09:29 - 002824704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2018-10-10 17:14 - 2018-09-20 09:29 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-10-10 17:14 - 2018-09-20 09:28 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2018-10-10 17:14 - 2018-09-20 07:43 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14 - 2018-09-20 06:52 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 006569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 006039368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 001989232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 001513032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 000357056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 001129544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 000581792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-10-10 17:14 - 2018-09-20 05:21 - 022013440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-10-10 17:14 - 2018-09-20 05:17 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-10-10 17:14 - 2018-09-20 05:15 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-10-10 17:14 - 2018-09-20 05:13 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-10-10 17:14 - 2018-09-20 05:12 - 000272200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-10-10 17:14 - 2018-09-20 05:12 - 000269128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 005777920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-10-10 17:14 - 2018-09-20 05:10 - 001221128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 000566800 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 000500536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-10-10 17:14 - 2018-09-20 05:10 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2018-10-10 17:14 - 2018-09-20 05:10 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-10-10 17:14 - 2018-09-20 05:10 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-10-10 17:14 - 2018-09-20 05:09 - 007520096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 007432136 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 002825232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 002462888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 002421248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 001767096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 001097744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000885952 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-10-10 17:14 - 2018-09-20 05:08 - 004191232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-10-10 17:14 - 2018-09-20 05:08 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-10-10 17:14 - 2018-09-20 04:53 - 025851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-10-10 17:14 - 2018-09-20 04:46 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-10-10 17:14 - 2018-09-20 04:44 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-10-10 17:14 - 2018-09-20 04:44 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-10-10 17:14 - 2018-09-20 04:43 - 000052736 _____ C:\WINDOWS\system32\runexehelper.exe
2018-10-10 17:14 - 2018-09-20 04:42 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-10-10 17:14 - 2018-09-20 04:42 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-10-10 17:14 - 2018-09-20 04:42 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 007577088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-10-10 17:14 - 2018-09-20 04:41 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2018-10-10 17:14 - 2018-09-20 04:37 - 004615680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-10-10 17:14 - 2018-09-20 04:37 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-10-10 17:14 - 2018-09-20 04:36 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-10-10 17:14 - 2018-09-20 03:21 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-10-10 17:14 - 2018-09-20 02:28 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2018-10-10 17:14 - 2018-09-08 09:12 - 000452112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 002868536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-10-10 17:14 - 2018-09-08 09:07 - 001610552 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000792376 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000689464 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000612360 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000309560 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000144696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-10-10 17:14 - 2018-09-08 09:07 - 000069944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-10-10 17:14 - 2018-09-08 09:03 - 002267136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-10-10 17:14 - 2018-09-08 09:02 - 000645112 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2018-10-10 17:14 - 2018-09-08 09:02 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-10-10 17:14 - 2018-09-08 08:58 - 001639352 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-10-10 17:14 - 2018-09-08 08:58 - 001520744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-10-10 17:14 - 2018-09-08 08:57 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2018-10-10 17:14 - 2018-09-08 08:44 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2018-10-10 17:14 - 2018-09-08 08:43 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2018-10-10 17:14 - 2018-09-08 08:43 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll
2018-10-10 17:14 - 2018-09-08 08:41 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-10-10 17:14 - 2018-09-08 08:40 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2018-10-10 17:14 - 2018-09-08 08:40 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2018-10-10 17:14 - 2018-09-08 08:39 - 005505024 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 002052096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 001787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 001288192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 001004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2018-10-10 17:14 - 2018-09-08 08:37 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-10-10 17:14 - 2018-09-08 08:17 - 001540104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-10-10 17:14 - 2018-09-08 08:16 - 000482080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2018-10-10 17:14 - 2018-09-08 08:14 - 001328056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-10-10 17:14 - 2018-09-08 08:13 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-10-10 17:14 - 2018-09-08 08:13 - 000181288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2018-10-10 17:14 - 2018-09-08 08:03 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2018-10-10 17:14 - 2018-09-08 08:03 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2018-10-10 17:14 - 2018-09-08 08:02 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2018-10-10 17:14 - 2018-09-08 08:00 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 001530368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 001308672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 005391360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2018-10-10 17:14 - 2018-09-08 07:57 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2018-10-10 17:14 - 2018-09-08 07:56 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-10-10 17:14 - 2018-09-08 05:08 - 000462880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-10-10 17:14 - 2018-09-08 04:59 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-10-10 17:14 - 2018-09-08 04:59 - 000361544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-10-10 17:14 - 2018-09-08 04:58 - 000744976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-10-10 17:14 - 2018-09-08 04:58 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2018-10-10 17:14 - 2018-09-08 04:58 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 002571128 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 001016984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-10-10 17:14 - 2018-09-08 04:57 - 000482384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000368448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000267576 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-10-10 17:14 - 2018-09-08 04:51 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-10-10 17:14 - 2018-09-08 04:45 - 000295416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2018-10-10 17:14 - 2018-09-08 04:45 - 000286824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2018-10-10 17:14 - 2018-09-08 04:44 - 001980984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-10-10 17:14 - 2018-09-08 04:44 - 000829752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-10-10 17:14 - 2018-09-08 04:43 - 001174448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-10-10 17:14 - 2018-09-08 04:43 - 000269104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2018-10-10 17:14 - 2018-09-08 04:32 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2018-10-10 17:14 - 2018-09-08 04:31 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-10-10 17:14 - 2018-09-08 04:31 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2018-10-10 17:14 - 2018-09-08 04:30 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 004771840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2018-10-10 17:14 - 2018-09-08 04:29 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000481280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 002328064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 003553792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 001457664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 001096704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-10-10 17:14 - 2018-09-08 04:24 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 001655296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2018-10-10 17:14 - 2018-09-08 04:22 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-08 20:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-08 20:21 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-08 20:20 - 2018-07-11 19:56 - 000000000 ___RD C:\Users\barte\OneDrive
2018-11-08 20:19 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-06 23:26 - 2018-07-11 23:10 - 000000000 ____D C:\Users\barte\AppData\Local\clink
2018-11-06 23:26 - 2018-07-11 22:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-06 22:11 - 2018-07-11 22:35 - 000882158 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-06 22:11 - 2018-07-11 20:53 - 000050080 _____ C:\WINDOWS\system32\perfh01B.dat
2018-11-06 22:11 - 2018-07-11 20:53 - 000012186 _____ C:\WINDOWS\system32\perfc01B.dat
2018-11-06 22:11 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-06 22:07 - 2018-07-11 23:04 - 000000354 _____ C:\WINDOWS\Tasks\HPCeeScheduleForPe3k.job
2018-11-06 22:07 - 2018-07-11 22:57 - 000000000 ____D C:\ProgramData\Synaptics
2018-11-06 22:07 - 2018-07-11 22:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-06 22:07 - 2018-07-11 20:45 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-11-06 22:06 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-11-06 21:59 - 2018-07-11 23:04 - 000003242 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForPe3k
2018-11-06 21:23 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-06 21:17 - 2018-07-31 20:53 - 000000000 ____D C:\Users\barte\AppData\Roaming\vlc
2018-11-06 20:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-04 21:34 - 2018-07-11 22:24 - 000000000 ____D C:\Users\barte
2018-11-04 19:06 - 2018-07-16 12:58 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-11-04 19:06 - 2018-07-16 12:58 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-11-01 21:43 - 2018-07-31 20:07 - 000000000 ____D C:\Users\barte\Documents\BIP motors
2018-11-01 21:33 - 2018-07-16 12:53 - 000000000 ____D C:\Users\barte\AppData\Local\StimulsoftReportsResources
2018-11-01 17:17 - 2018-08-05 10:17 - 000000000 ____D C:\Program Files (x86)\WinCDEmu
2018-11-01 17:16 - 2018-08-09 19:30 - 000000000 ____D C:\ProgramData\Ashampoo
2018-11-01 17:14 - 2018-09-02 15:53 - 000000000 ____D C:\Program Files (x86)\CMS
2018-11-01 17:05 - 2018-07-11 19:54 - 000000000 ____D C:\Users\barte\AppData\Local\VirtualStore
2018-11-01 16:50 - 2018-07-11 23:14 - 000017400 _____ C:\WINDOWS\system32\results.xml
2018-11-01 16:40 - 2018-07-11 23:34 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2018-11-01 16:40 - 2018-07-11 23:03 - 000000652 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2018-11-01 16:39 - 2018-09-12 17:49 - 000102904 _____ C:\WINDOWS\system32\IccLibDll_x64.dll
2018-11-01 16:39 - 2018-07-11 22:24 - 000072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-11-01 16:39 - 2018-07-11 20:51 - 000000000 ____D C:\Swsetup
2018-11-01 16:39 - 2018-04-12 18:08 - 000069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2018-11-01 16:39 - 2016-05-03 22:30 - 003802600 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2018-11-01 16:39 - 2016-05-03 22:30 - 000372856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTray.exe
2018-11-01 15:58 - 2018-07-11 21:48 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-11-01 15:51 - 2018-08-05 11:22 - 000000000 ____D C:\Users\barte\Documents\ViberDownloads
2018-11-01 15:48 - 2018-08-05 11:22 - 000000000 ____D C:\Users\barte\AppData\Roaming\ViberPC
2018-10-26 22:30 - 2018-07-11 20:45 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-10-26 21:12 - 2018-07-11 23:39 - 000000000 ____D C:\ProgramData\Epson
2018-10-26 21:12 - 2018-07-11 22:33 - 000000000 ____D C:\ProgramData\Packages
2018-10-26 21:07 - 2018-07-11 20:16 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-10-26 21:06 - 2018-07-16 13:14 - 000000000 ____D C:\Users\barte\AppData\LocalLow\Adobe
2018-10-17 19:35 - 2018-07-18 20:23 - 000000000 ____D C:\Users\barte\AppData\Local\D3DSCache
2018-10-17 19:32 - 2018-07-11 21:03 - 000559880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-10-17 19:31 - 2018-07-11 22:28 - 000003364 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-502565617-607509685-159583452-1001
2018-10-17 19:31 - 2018-07-11 22:24 - 000002363 _____ C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-10-17 19:29 - 2018-07-11 22:47 - 000000626 _____ C:\Users\barte\advanced_ip_scanner_MAC.bin
2018-10-17 19:29 - 2018-07-11 22:47 - 000000015 _____ C:\Users\barte\advanced_ip_scanner_Comments.bin
2018-10-17 19:29 - 2018-07-11 22:47 - 000000015 _____ C:\Users\barte\advanced_ip_scanner_Aliases.bin
2018-10-10 20:37 - 2018-08-09 20:28 - 000000000 ____D C:\Users\barte\AppData\Roaming\GHISLER
2018-10-10 19:08 - 2018-07-11 19:54 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-10-10 19:08 - 2018-07-11 19:54 - 000000000 ___RD C:\Users\barte\3D Objects
2018-10-10 17:36 - 2018-07-11 21:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-10-10 17:31 - 2018-07-11 21:02 - 136745976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-10-10 17:22 - 2018-07-11 22:23 - 000510936 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-10-10 16:48 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF

==================== Files in the root of some directories =======

2018-09-02 15:53 - 2018-09-02 15:53 - 000058076 _____ () C:\Program Files (x86)\CMS Setup Log.txt
2018-11-01 17:13 - 2018-11-01 17:14 - 000024983 _____ () C:\Program Files (x86)\CMS Uninstall Log.txt
2018-09-02 19:50 - 2018-09-02 19:51 - 000005632 _____ () C:\Users\barte\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-10-26 21:38 - 2018-11-03 22:02 - 000007623 _____ () C:\Users\barte\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2018-07-11 23:43 - 2006-05-24 18:10 - 000455600 ____R (Macrovision Corporation) C:\Users\barte\AppData\Local\Temp\_isB43E.exe
2018-07-11 23:49 - 2006-05-24 18:10 - 000455600 ____R (Macrovision Corporation) C:\Users\barte\AppData\Local\Temp\_isF313.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-11 22:23

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07.11.2018
Ran by Pe3k (08-11-2018 20:25:13)
Running from C:\Users\barte\Downloads
Windows 10 Education Version 1803 17134.345 (X64) (2018-07-11 21:28:38)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-502565617-607509685-159583452-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-502565617-607509685-159583452-503 - Limited - Disabled)
Guest (S-1-5-21-502565617-607509685-159583452-501 - Limited - Disabled)
Pe3k (S-1-5-21-502565617-607509685-159583452-1001 - Administrator - Enabled) => C:\Users\barte
WDAGUtilityAccount (S-1-5-21-502565617-607509685-159583452-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Advanced IP Scanner 2.5 (HKLM-x32\...\{534F1195-83BF-4B97-9584-FB8363AAC01E}) (Version: 2.5.3646 - Famatech)
APLI Master (HKLM-x32\...\{4767CC38-E667-4447-B60C-4C0721C1E091}) (Version: 6.4.15 - APLI Paper S.A.) Hidden
APLI Master (HKLM-x32\...\InstallShield_{4767CC38-E667-4447-B60C-4C0721C1E091}) (Version: 6.4.15 - APLI Paper S.A.)
Ashampoo Burning Studio 19 (HKLM-x32\...\{91B33C97-BA3F-5C99-C2A6-0EB17CC9054B}_is1) (Version: 19.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 12 v.12.0.4 (HKLM-x32\...\{C92AB6F1-691B-9629-9ECD-7291A9DF25A8}_is1) (Version: 12.0.4 - Ashampoo GmbH & Co. KG)
Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.448 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C8730B1A-133D-4546-8E21-9EC186341F20}) (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (x64) (HKLM\...\{67D57366-EFCC-46DA-BB1F-BBE89B377177}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (HKLM\...\{1253ED86-69FD-4A7B-BDF2-96A522583A88}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (HKLM\...\{72922AB6-F920-4C98-985D-EC90CE0918D4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (HKLM\...\{9782A612-03A7-488F-A598-33558163D8F8}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CS (x64) (HKLM\...\{300DB480-7301-436A-A312-B695B2BC6D71}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CT (x64) (HKLM\...\{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (HKLM\...\{02C85FBD-87D3-4352-BF2E-AFE897CD5559}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CZ (x64) (HKLM\...\{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - DE (x64) (HKLM\...\{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (HKLM\...\{A66E09BB-9892-421D-9EB9-311D12AA5244}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - EN (x64) (HKLM\...\{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - ES (x64) (HKLM\...\{B1452C41-DC90-4B58-8320-ABB515E87FFB}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (HKLM\...\{6E6D1438-33CC-413B-BC96-3497B1271CDD}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (HKLM\...\{5FB5FF89-0938-49D9-850B-53B78B84A7E4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - FR (x64) (HKLM\...\{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM (x64) (HKLM\...\{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (HKLM\...\{FB081BA0-08D2-4C8C-9E55-788A90430BE3}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IT (x64) (HKLM\...\{8285FEBA-D373-493F-BC78-934F84A0A298}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - JP (x64) (HKLM\...\{F5A1D3E4-416E-4723-AD35-86A372B99174}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - NL (x64) (HKLM\...\{A7922CC8-0EBD-497B-B381-5B3992905327}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (HKLM\...\{04D8C47E-C0FE-4CA5-8878-91ECD9552109}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PL (x64) (HKLM\...\{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (HKLM\...\{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - RU (x64) (HKLM\...\{B83D220A-33AB-4AF5-963A-887BD971270E}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (HKLM\...\{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (HKLM\...\{48DD8181-A983-447B-9660-A55A935CA751}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (HKLM\...\{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (HKLM\...\{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (HKLM\...\{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (HKLM\...\{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 -TR (x64) (HKLM\...\{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}) (Version: 18.0 - Corel Corporation) Hidden
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{AB8BE3EA-01D3-44B7-8E77-A9601CBDEBDE}) (Version: 3.10.0085 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
EPSON Scan PDF EXtensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)
Epson Software Updater (HKLM-x32\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.77 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP 3D DriveGuard (HKLM\...\{7371AB00-AC38-4819-8329-7DAF05C9CC46}) (Version: 5.1.7.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{F322B446-B157-4257-B44F-4F22D41F8EDB}) (Version: 8.6.18.11 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{71F817B3-541F-41E2-BBE3-53C6E15EAEFF}) (Version: 12.9.24.3 - HP Inc.)
HP Universal Camera Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1114.3_WHQL - Sonix)
HP Wireless Button Driver (HKLM-x32\...\{EFA01423-3857-468C-B7B6-F30AA08E50BC}) (Version: 1.1.5.1 - Hewlett-Packard Company)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
IPM_Common_x64 (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.9.389 - Your Company Name) Hidden
K-Lite Codec Pack 14.3.6 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.3.6 - KLCP)
MediaInfo 18.05 (HKLM\...\MediaInfo) (Version: 18.05 - MediaArea.net)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-502565617-607509685-159583452-1001\...\OneDriveSetup.exe) (Version: 18.172.0826.0010 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
OBERON (HKLM-x32\...\{68755A70-3A1B-4E70-A5EF-6F2452B77A5A}) (Version: 18.01.04 - EXALOGIC)
Odinštalovať tlačiareň EPSON L6170 Series (HKLM\...\EPSON L6170 Series) (Version: - Seiko Epson Corporation)
Odinštalovať tlačiareň EPSON Remote Print (HKLM\...\EPSON Remote Print) (Version: - SEIKO EPSON Corporation)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
Panoramic Camera Software (HKLM-x32\...\{8068576F-E02C-42FE-AA7A-B40DE37EC239}) (Version: 4.3.2 - common) Hidden
Panoramic Camera Software (HKLM-x32\...\InstallShield_{8068576F-E02C-42FE-AA7A-B40DE37EC239}) (Version: 4.3.2 - common)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Príručky EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.54.0.0 - Seiko Epson Corporation)
SilverCrest STMS 2017 A1 Driver (HKLM-x32\...\{1E494817-D81E-4B0E-B379-F34DF4DCDA58}) (Version: 1.0 - SilverCrest)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.63 - Synaptics Incorporated)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.2-23733 - Synology)
Synology Surveillance Station Client (HKLM\...\Synology Surveillance Station Client) (Version: 1.1.4.0406 - Synology)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.26558 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - )
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{8CFAB044-7D2E-4655-B86D-99932E988980}) (Version: 2.45.0.0 - Microsoft Corporation)
Viber (HKLM-x32\...\{EB5ED85E-A993-4615-9027-A00679FD8790}) (Version: 9.3.0.4 - Viber Media Inc.) Hidden
Viber (HKU\S-1-5-21-502565617-607509685-159583452-1001\...\{2f7404d1-d03c-4354-8aa6-a5b5d4a41205}) (Version: 9.3.0.4 - Viber Media Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
WinRAR 5.60 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.60.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-502565617-607509685-159583452-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-11-01] (Intel Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2A57A5F7-7A27-4DA2-9352-246704B7A4B2} - System32\Tasks\Driver Booster SkipUAC (Pe3k) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe
Task: {2F9BF0DD-DE08-49BC-8D97-9B5CD7712EE3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-11-21] (HP Inc.)
Task: {325231DD-0006-4E6A-8189-1FB9AAC9C252} - System32\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE [2017-06-07] (Seiko Epson Corporation)
Task: {39E985B7-BD7F-4D7C-8C39-CA3B15BF164B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
Task: {470512E1-484A-4CA4-AF0C-E6322A3966A9} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {4A9A2801-4808-4F3E-AECD-E9411806CFFF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {537A5F6D-B4D0-4335-A505-AC97DD49BA69} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {594073B3-C607-469A-AF35-737B3A7928AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {64C7596B-0825-4ABA-A8F2-487320A1AA88} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {748E4697-A940-4964-B2F2-EFED36D77ED0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-08-21] (HP Inc.)
Task: {776C1384-38EE-49D1-BDC3-74DD8CDE29F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-11-21] (HP Inc.)
Task: {934AAC9F-D34F-4ACC-8AC2-2CA07829D594} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {9988D8EA-449B-4221-8973-AD4BBC1F5545} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {A0046DDD-20E8-4F0A-935E-44CF5021AF76} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {B334EF4D-E94C-4754-956E-BEAE80D41D7A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {BA1A8342-66B5-4EBF-B975-BBF3163E1476} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {C97F2E0C-4C92-4A27-B86E-A15777C55E47} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {DAE53DF3-D7D8-4F2F-89F3-CC9371EB2578} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {E092CEDE-2167-4B48-8305-9C8352FB5D3F} - System32\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE [2017-06-07] (Seiko Epson Corporation)
Task: {E0FFFFF4-6469-47F1-B2B1-F66C85219FC9} - System32\Tasks\klcp_update => CodecTweakTool.exe
Task: {EBF4839A-6974-488F-9116-EF2B73818B39} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {FAEAE1C6-9E7A-438D-A15F-74E8E22C9B61} - System32\Tasks\CorelUpdateHelperTask-20821CE9640A8DC2650D08072749E8E7 => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {FC6576AB-5104-4CCF-AC42-01F0517AE447} - System32\Tasks\HPCeeScheduleForPe3k => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-06-24] (HP Inc.)
Task: {FD1F1409-7C14-42B9-84AC-AC84E6BBB002} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2018-08-30] (HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE:/EXE:{57ADFBCA-C47A-4116-8E4F-02711BD8CEBB} /F:UpdateWORKGROUP\PB-ELITEBOOK$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE:/EXE:{BA98BC21-3F11-4A12-8112-18230C58A2D2} /F:UpdateWORKGROUP\PB-ELITEBOOK$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForPe3k.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Nástroj na obnovenie Chromebooku.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jndclpdbaamdhonoechobihbbiimdgai
ShortcutWithArgument: C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Ubiquiti Device Discovery Tool.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=hmpigflbjeapnknladcfphgkemopofig

==================== Loaded Modules (Whitelisted) ==============

2015-06-10 17:16 - 2018-07-11 22:57 - 000022528 _____ () C:\WINDOWS\system32\fpCSEvtSvc.exe
2018-05-11 12:21 - 2018-05-11 12:21 - 000248856 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-07-11 23:18 - 2018-07-11 23:18 - 001308672 _____ () C:\WINDOWS\system32\FaceProcessor.dll
2018-07-11 23:18 - 2018-07-11 23:18 - 000542888 _____ () C:\WINDOWS\system32\FaceProcessorCore.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 001348664 _____ () C:\WINDOWS\system32\FaceTrackerInternal.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-10-04 15:04 - 2018-10-04 15:05 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 010978304 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\LibWrapper.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 002810368 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\skypert.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000685056 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-10-26 21:07 - 2018-10-23 22:24 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libglesv2.dll
2018-10-26 21:07 - 2018-10-23 22:24 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libegl.dll
2017-07-14 14:26 - 2017-07-14 14:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2018-10-26 21:04 - 2018-10-22 12:21 - 000047688 _____ () C:\Users\barte\AppData\Local\Viber\qrencode.dll
2018-10-26 21:04 - 2018-10-22 12:22 - 000281160 _____ () C:\Users\barte\AppData\Local\Viber\ViberRTC.dll
2018-10-26 21:04 - 2018-10-22 12:22 - 000472136 _____ () C:\Users\barte\AppData\Local\Viber\imageformats\qsvg.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\de1bde40-8f21-44bc-9d91-a6c2749cfa22\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\d173dbd8-48be-4caf-849b-bf05298f7ee8\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\c0491ac7-638e-4301-95f2-575a39aec321\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\c83e5a01-6a57-4b1c-ac0c-27fe978e352c\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\12a8489d-2609-4692-ac0d-68181819ef06\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\f05e8cbc-00a2-4eab-a22f-c586e4b00f62\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\002f380c-972a-4fc0-8a92-6597c0ba1287\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\63d67206-aa85-4dc1-8f40-67228476b22d\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\82f79cae-2085-45e0-821e-9c5f660ce8e1\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\1d54a39c-da6b-419d-8b7e-670c6e55df82\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\f2c75dca-90a9-4098-9183-a659c465b1cc\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\df813181-3dde-4d14-876a-c736bfec8899\AgileDotNetRT.dll
2018-11-06 20:50 - 2018-11-06 20:50 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\032e2861-222b-4446-b6ec-850c84afb82d\AgileDotNetRT.dll
2018-07-15 07:44 - 2010-09-03 13:31 - 000053248 _____ () C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\UniFunc.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-502565617-607509685-159583452-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\barte\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\bmw-ninet-ass-girl-ninet-special-marlboro (2).jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4005AD91-7E9F-4507-AF84-1D5B49EA6FE3}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{9D32E688-9E0E-46B4-964A-BD920648E43A}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{16C2348C-D8B8-4F6D-863F-9225C39A80E9}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{A9EC0021-1E9D-42EF-A7A6-CCF8F39104FE}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [UDP Query User{4DFF8F35-81B3-4D86-A700-E37FC7EE87B3}C:\users\barte\downloads\winbox.exe] => (Allow) C:\users\barte\downloads\winbox.exe
FirewallRules: [TCP Query User{978DBDE6-7CD5-4A18-AE76-3D53E9255C27}C:\users\barte\downloads\winbox.exe] => (Allow) C:\users\barte\downloads\winbox.exe
FirewallRules: [{3CC9309C-C2E3-44CC-90CE-1D8D984B89E2}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{D396F2CA-E494-4058-B07B-5A4C66C6A02F}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{FDC7C5EE-6920-4A1D-ABE4-CFB0D8B58038}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{E7C98A7B-DC1F-434F-B4F1-B31D696422DB}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [TCP Query User{04F45D4E-EF81-4BDF-AE42-74B04E004CB1}C:\program files (x86)\mikrotik\winbox.exe] => (Allow) C:\program files (x86)\mikrotik\winbox.exe
FirewallRules: [UDP Query User{C75CEEBF-35AB-4321-B85F-56F0A9A5CC12}C:\program files (x86)\mikrotik\winbox.exe] => (Allow) C:\program files (x86)\mikrotik\winbox.exe
FirewallRules: [{CED8DF22-800E-4045-A915-570DC56E83DD}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{680CB856-9CFC-41A5-BD12-8179891750B9}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe
FirewallRules: [TCP Query User{DDED4BC2-986B-4477-809D-7B3143930709}C:\program files (x86)\panoramic camera software\panoramic camera software.exe] => (Allow) C:\program files (x86)\panoramic camera software\panoramic camera software.exe
FirewallRules: [UDP Query User{8FF63763-311B-44E7-81CF-F08E7B0A7624}C:\program files (x86)\panoramic camera software\panoramic camera software.exe] => (Allow) C:\program files (x86)\panoramic camera software\panoramic camera software.exe
FirewallRules: [TCP Query User{94482009-BB82-4E61-B85B-99107079933A}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [UDP Query User{2E877952-E12A-498C-9F5C-11B4074806ED}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [TCP Query User{8D97132B-62EB-4315-98C5-6015CB280A44}C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe] => (Allow) C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe
FirewallRules: [UDP Query User{9ADA93B5-BAEB-44C8-9078-CE94A11F66F7}C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe] => (Allow) C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe
FirewallRules: [TCP Query User{6888B0D9-DFFF-4075-BE25-6AE11D72B4A3}C:\program files (x86)\cms\cms.exe] => (Allow) C:\program files (x86)\cms\cms.exe
FirewallRules: [UDP Query User{E474ECA6-87E4-4E1B-B4C9-0F91435C50EB}C:\program files (x86)\cms\cms.exe] => (Allow) C:\program files (x86)\cms\cms.exe
FirewallRules: [TCP Query User{31C87DC0-62C6-45B7-A5FA-8CF599F18C4C}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{31A1D91C-CFD1-4ED7-864B-17910D1CD107}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{EE448A33-BF2A-4E6E-8D4E-4677C1D776F7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8012A1A8-B181-4ECD-B0CB-9464235BC03D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{ECBDBD95-FC98-466B-8F15-6F33B1D62F70}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6BC3B14B-6E79-4211-9EA3-6EA2B638BDE2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6BF292B9-6ED7-4987-88AF-E05C49B164D6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Restore Points =========================

01-11-2018 16:03:38 Windows Update
03-11-2018 09:17:49 Inštalátor modulov systému Windows
04-11-2018 10:43:56 Inštalátor modulov systému Windows
06-11-2018 21:23:31 Inštalátor modulov systému Windows

==================== Faulty Device Manager Devices =============

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/08/2018 08:20:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (11/08/2018 08:17:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8007139F
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/08/2018 08:17:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8007139F
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=TimerEvent

Error: (11/06/2018 11:24:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/06/2018 10:07:41 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (11/06/2018 10:07:40 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/06/2018 09:57:58 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/06/2018 09:28:05 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: PB-ELITEBOOK)
Description: httphttp-2147467263


System errors:
=============
Error: (11/08/2018 08:20:50 PM) (Source: DCOM) (EventID: 10000) (User: PB-ELITEBOOK)
Description: Unable to start a DCOM Server: {417976B7-917D-4F1E-8F14-C18FCCB0B3A8}. The error:
"0"
Happened while starting this command:
C:\Windows\System32\coredpussvr.exe -Embedding

Error: (11/08/2018 08:20:08 PM) (Source: DCOM) (EventID: 10016) (User: PB-ELITEBOOK)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user PB-ELITEBOOK\Pe3k SID (S-1-5-21-502565617-607509685-159583452-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 08:19:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 08:19:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 08:19:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/06/2018 10:31:41 PM) (Source: DCOM) (EventID: 10000) (User: PB-ELITEBOOK)
Description: Unable to start a DCOM Server: {417976B7-917D-4F1E-8F14-C18FCCB0B3A8}. The error:
"298"
Happened while starting this command:
C:\Windows\System32\coredpussvr.exe -Embedding

Error: (11/06/2018 10:09:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/06/2018 10:09:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


Windows Defender:
===================================
Date: 2018-10-17 20:42:24.979
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B1A6A0D4-0BB3-4C04-BE3A-A9CF4F92CB6B}
Scan Type: Antimalware
Scan Parameters: Full Scan

Date: 2018-09-02 20:19:23.743
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: Trojan:Win32/Fuerboos.E!cl
ID: 2147723656
Severity: Závažná
Category: Trójsky kôň
Path: containerfile:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso; file:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso->ashampoo-photo-commander-16.0_9fe0f.exe; webfile:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso|http://solecifun.ga/ZJYkZIUGISeegNcGv4Z ... 9351547114
Detection Origin: Internet
Detection Type: FastPath
Detection Source: Downloads and attachments
Process Name: Unknown
Signature Version: AV: 1.275.624.0, AS: 1.275.624.0, NIS: 1.275.624.0
Engine Version: AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-09-02 19:48:32.691
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {BB725DEE-7931-416B-87E3-88A733254F06}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-09-02 19:01:10.994
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: HackTool:Win32/Keygen
ID: 2147593794
Severity: Vysoká
Category: Nástroj
Path: file:_H:\Users\PB\Downloads\WIN\All.activation.Windows.7-8-10.v13.8.2017-P2P\All activation\Activators\Windows Loader 2.2.2 by Daz\Windows Loader.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Signature Version: AV: 1.275.617.0, AS: 1.275.617.0, NIS: 1.275.617.0
Engine Version: AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-10-17 20:35:23.669
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version:
Update Source: User
Signature Type:
Update Type:
Current Engine Version:
Previous Engine Version:
Error code: 0x80070652
Error description: Another installation is already in progress. Complete that installation before proceeding with this install.

Date: 2018-10-17 20:34:03.740
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.881.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x80240022
Error description: Program nemôže skontrolovať aktualizácie definícií.

Date: 2018-10-17 20:34:03.739
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.881.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x80240022
Error description: Program nemôže skontrolovať aktualizácie definícií.

Date: 2018-09-12 18:36:08.770
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.275.627.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15200.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved

Date: 2018-09-12 18:36:08.770
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.275.627.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15200.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz
Percentage of memory in use: 38%
Total physical RAM: 8055.48 MB
Available physical RAM: 4985.02 MB
Total Virtual: 9335.48 MB
Available Virtual: 6387.26 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:166.32 GB) (Free:106.83 GB) NTFS

\\?\Volume{290d8893-0000-0000-0000-100000000000}\ (Vyhradené systémom) (Fixed) (Total:0.54 GB) (Free:0.5 GB) NTFS
\\?\Volume{290d8893-0000-0000-0000-10b729000000}\ () (Fixed) (Total:0.82 GB) (Free:0.34 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 167.7 GB) (Disk ID: 290D8893)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=166.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=838 MB) - (Type=27)

==================== End of Addition.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File
Task: {39E985B7-BD7F-4D7C-8C39-CA3B15BF164B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
Task: {64C7596B-0825-4ABA-A8F2-487320A1AA88} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
C:\Users\barte\AppData\Local\Temp
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\MountPoints2: {ae860742-9c0f-11e8-9f8a-b8763fdb167b} - "E:\HiSuiteDownLoader.exe"
C:\Users\barte\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End

Uložte do C:\Users\barte\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07.11.2018
Ran by Pe3k (administrator) on PB-ELITEBOOK (08-11-2018 21:28:35)
Running from C:\Users\barte\Downloads
Loaded Profiles: Pe3k (Available Profiles: Pe3k)
Platform: Windows 10 Education Version 1803 17134.345 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Home) C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
() C:\Windows\System32\fpCSEvtSvc.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(EXALOGIC) C:\OBERON\SHARE\SYSTEM\OBERON Center.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Siliten) C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe
(Viber Media S.à r.l.) C:\Users\barte\AppData\Local\Viber\Viber.exe
(Siliten) C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM-x32\...\Run: [OBERON Center] => C:\OBERON\Share\System\OBERON Center.exe [1701096 2018-01-04] (EXALOGIC)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1151872 2016-11-18] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Launch SilverCrest STMS 2017 A1-K] => C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\KbClient_FD2.exe [1424384 2011-02-17] (Siliten)
HKLM-x32\...\Run: [Launch SilverCrest STMS 2017 A1-M] => C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\MouClient_FD2.exe [865280 2011-02-17] (Siliten)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [EPLTarget\P0000000000000002] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE [418000 2016-07-14] (Seiko Epson Corporation)
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\Run: [Viber] => C:\Users\barte\AppData\Local\Viber\Viber.exe [36730440 2018-11-03] (Viber Media S.à r.l.)
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISRE.EXE [418000 2016-07-14] (Seiko Epson Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{6971d900-6771-496f-93ed-d5a41d97fbf8}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-502565617-607509685-159583452-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-502565617-607509685-159583452-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2018-07-15] [Legacy] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-07-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-07-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-10-06] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.sk/
CHR StartupUrls: Default -> "hxxp://www.google.sk/"
CHR Profile: C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default [2018-11-08]
CHR Extension: (Prezentácie) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-07-11]
CHR Extension: (3DTin) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\algoakekcdmbbikdjgjdahbfihboglmi [2018-07-11]
CHR Extension: (Dokumenty) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-07-11]
CHR Extension: (Disk Google) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-11]
CHR Extension: (YouTube) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-07-11]
CHR Extension: (Adobe Acrobat) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-07-18]
CHR Extension: (Tabuľky) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-07-11]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-02]
CHR Extension: (Flash Control) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdgadgplbbdjlbjgdociahdlmbglfeen [2018-07-11]
CHR Extension: (IE Tab) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2018-11-01]
CHR Extension: (Ubiquiti Device Discovery Tool) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmpigflbjeapnknladcfphgkemopofig [2018-09-16]
CHR Extension: (Nástroj na obnovenie Chromebooku) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndclpdbaamdhonoechobihbbiimdgai [2018-07-11]
CHR Extension: (Tiësto) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2018-07-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-11]
CHR Extension: (Gmail) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-07-11]
CHR Extension: (Chrome Media Router) - C:\Users\barte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-26]
CHR HKU\S-1-5-21-502565617-607509685-159583452-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 APLI Master AutoUpdater; C:\Program Files (x86)\APLI Paper\APLI Master\ApliAutoUpdater.exe [167936 2011-10-24] (Home) [File not signed]
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2017-03-10] (Seiko Epson Corporation)
R2 fpCsEvtSvc; C:\WINDOWS\system32\fpCSEvtSvc.exe [22528 2018-07-11] ()
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)
S2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [319096 2016-07-12] (Intel Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
S2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [256224 2017-09-06] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11644656 2018-09-10] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248856 2018-05-11] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [82944 2018-07-11] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-11-01] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-11-01] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [472016 2018-07-11] (Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-07-11] (REALiX(tm))
R3 InputFilter_Hid_FlexDef2b; C:\WINDOWS\System32\drivers\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R3 MouFilter_Mou_FlexDef4; C:\WINDOWS\System32\drivers\MouFilter_FlexDef4.sys [15360 2010-10-20] (Siliten)
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2018-04-12] (Intel Corporation)
S2 npf; C:\Windows\SysWOW64\drivers\npf.sys [36600 2014-10-22] (Riverbed Technology, Inc.)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 smbdirect; C:\WINDOWS\System32\DRIVERS\smbdirect.sys [152064 2018-04-12] (Microsoft Corporation)
S3 SNP2UVC; C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2599624 2015-06-30] (Sonix Tech. Co., Ltd.)
R3 SNP2UVCW10; C:\WINDOWS\system32\DRIVERS\snp2uvcW10.sys [2530360 2018-07-11] (Sonix Tech. Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46184 2018-11-01] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [328696 2018-11-01] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60408 2018-11-01] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [32832 2018-07-11] (HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-08 21:23 - 2018-11-08 21:24 - 000003441 _____ C:\Users\barte\Downloads\Fixlog.txt
2018-11-08 20:50 - 2018-11-08 20:50 - 029591040 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 029573120 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 027468800 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 021848576 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 011643392 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 003581440 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 003511296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 003121152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 002898944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 001981696 _____ C:\WINDOWS\system32\iglhxa64.cpa
2018-11-08 20:50 - 2018-11-08 20:50 - 001049576 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000940360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000575488 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000542720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000530968 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000525800 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000513640 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000444008 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000442880 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdev.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000440320 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrell.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfra.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxresn.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrus.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrom.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsky.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptg.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrplk.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnld.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrita.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhrv.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdeu.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhun.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfin.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcsy.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtrk.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsve.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrslv.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptb.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnor.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtha.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdan.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrheb.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrara.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000432128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrjpn.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrkor.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000429056 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcht.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000428544 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrchs.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000410112 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTMM.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000401512 _____ (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000384512 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpph.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000342528 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2018-11-08 20:50 - 2018-11-08 20:50 - 000286208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrenu.lrc
2018-11-08 20:50 - 2018-11-08 20:50 - 000280680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000256616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000241664 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000223664 _____ C:\WINDOWS\system32\Gfxres.th-TH.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000220432 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000210106 _____ C:\WINDOWS\system32\Gfxres.el-GR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000195584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000194245 _____ C:\WINDOWS\system32\Gfxres.ru-RU.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000187496 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000184352 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000175104 _____ (Intel Corporation) C:\WINDOWS\system32\gfxSrvc.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000166170 _____ C:\WINDOWS\system32\Gfxres.ar-SA.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000163421 _____ C:\WINDOWS\system32\Gfxres.ja-JP.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000159008 _____ C:\WINDOWS\system32\Gfxres.he-IL.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000149682 _____ C:\WINDOWS\system32\Gfxres.it-IT.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000148042 _____ C:\WINDOWS\system32\Gfxres.ko-KR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000147393 _____ C:\WINDOWS\system32\Gfxres.de-DE.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000147288 _____ C:\WINDOWS\system32\Gfxres.es-ES.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000146004 _____ C:\WINDOWS\system32\Gfxres.ro-RO.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000145491 _____ C:\WINDOWS\system32\Gfxres.fr-FR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000144645 _____ C:\WINDOWS\system32\Gfxres.tr-TR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000144260 _____ C:\WINDOWS\system32\Gfxres.pt-BR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000144020 _____ C:\WINDOWS\system32\Gfxres.nl-NL.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000143932 _____ C:\WINDOWS\system32\Gfxres.hu-HU.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000142882 _____ C:\WINDOWS\system32\Gfxres.sv-SE.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000142877 _____ C:\WINDOWS\system32\Gfxres.pt-PT.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000142717 _____ C:\WINDOWS\system32\Gfxres.pl-PL.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000142336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdo.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000142289 _____ C:\WINDOWS\system32\Gfxres.cs-CZ.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000142008 _____ C:\WINDOWS\system32\Gfxres.fi-FI.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000141838 _____ C:\WINDOWS\system32\Gfxres.sk-SK.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000141049 _____ C:\WINDOWS\system32\Gfxres.hr-HR.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000137889 _____ C:\WINDOWS\system32\Gfxres.sl-SI.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000137784 _____ C:\WINDOWS\system32\Gfxres.nb-NO.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000137141 _____ C:\WINDOWS\system32\Gfxres.da-DK.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000132623 _____ C:\WINDOWS\system32\Gfxres.en-US.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000126976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcpl.cpl
2018-11-08 20:50 - 2018-11-08 20:50 - 000126300 _____ C:\WINDOWS\system32\Gfxres.zh-TW.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000124650 _____ C:\WINDOWS\system32\Gfxres.zh-CN.resources
2018-11-08 20:50 - 2018-11-08 20:50 - 000101376 _____ C:\WINDOWS\system32\igdde64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000094208 _____ C:\WINDOWS\system32\IccLibDll_x64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000081408 _____ C:\WINDOWS\SysWOW64\igdde32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000064000 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000059425 _____ C:\WINDOWS\system32\iglhxo64.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000059398 _____ C:\WINDOWS\system32\iglhxg64.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000059230 _____ C:\WINDOWS\system32\iglhxc64.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000059104 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000058796 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000058109 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000056832 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000056320 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000031984 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000025088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000017082 _____ C:\WINDOWS\system32\iglhxs64.vp
2018-11-08 20:50 - 2018-11-08 20:50 - 000009728 _____ ( ) C:\WINDOWS\system32\IGFXDEVLib.dll
2018-11-08 20:50 - 2018-11-08 20:50 - 000001074 _____ C:\WINDOWS\system32\iglhxa64.vp
2018-11-08 20:28 - 2018-11-08 20:28 - 000000000 ____D C:\Users\barte\AppData\Local\Viber
2018-11-08 20:25 - 2018-11-08 20:25 - 000046285 _____ C:\Users\barte\Downloads\Addition.txt
2018-11-08 20:23 - 2018-11-08 21:29 - 000016541 _____ C:\Users\barte\Downloads\FRST.txt
2018-11-08 20:23 - 2018-11-08 21:28 - 000000000 ____D C:\FRST
2018-11-08 20:22 - 2018-11-08 20:22 - 002415616 _____ (Farbar) C:\Users\barte\Downloads\FRST64.exe
2018-11-08 20:20 - 2018-11-08 20:20 - 000000000 ___HD C:\OneDriveTemp
2018-11-06 22:05 - 2018-11-06 22:06 - 000000000 ____D C:\AdwCleaner
2018-11-06 22:01 - 2018-11-06 22:01 - 007592144 _____ (Malwarebytes) C:\Users\barte\Desktop\adwcleaner_7.2.4.0.exe
2018-11-06 21:54 - 2018-11-06 21:54 - 000000000 ____D C:\Users\barte\Downloads\NWA1123-ACv2_5.35(ABEL.4)C0
2018-11-06 21:52 - 2018-11-06 21:53 - 016336827 _____ C:\Users\barte\Downloads\NWA1123-ACv2_5.35(ABEL.4)C0.zip
2018-11-06 21:11 - 2018-11-06 21:11 - 000000000 ____D C:\rsit
2018-11-06 21:11 - 2018-11-06 21:11 - 000000000 ____D C:\Program Files\trend micro
2018-11-06 21:10 - 2018-11-06 21:10 - 001222144 _____ C:\Users\barte\Downloads\RSITx64.exe
2018-11-06 21:04 - 2018-11-06 21:04 - 000000000 ____D C:\Users\barte\AppData\Roaming\Macromedia
2018-11-06 21:02 - 2018-11-06 21:02 - 019592036 _____ C:\Users\barte\Downloads\Banská Bystrica_Tarty_Bratislava.mp4
2018-11-04 11:42 - 2018-11-04 21:34 - 000000000 ____D C:\Users\barte\Desktop\MANUAL
2018-11-04 09:21 - 2018-11-04 10:44 - 000000000 ____D C:\WINDOWS\Minidump
2018-11-01 21:47 - 2018-11-04 09:21 - 000000945 _____ C:\WINDOWS\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}.job
2018-11-01 21:47 - 2018-11-01 21:47 - 000004140 _____ C:\WINDOWS\System32\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}
2018-11-01 21:47 - 2018-11-01 21:47 - 000001453 _____ C:\Users\Public\Desktop\Príručky EPSON.lnk
2018-11-01 21:46 - 2018-11-04 09:21 - 000000945 _____ C:\WINDOWS\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}.job
2018-11-01 21:46 - 2018-11-01 21:46 - 000004140 _____ C:\WINDOWS\System32\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}
2018-11-01 21:45 - 2017-07-14 04:13 - 000184832 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\E_YLMBSRE.DLL
2018-11-01 17:25 - 2018-11-01 17:25 - 000010889 _____ C:\Users\barte\Downloads\[SkT]Lovec__Zimni_valka___The_Huntsman_Winter's_War_(Extended_Edition)(2016)(CZ)_=_CSFD_59%.torrent
2018-11-01 17:17 - 2018-11-01 17:17 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-01 17:14 - 2018-11-01 17:14 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2018-11-01 17:13 - 2018-11-01 17:14 - 000024983 _____ C:\Program Files (x86)\CMS Uninstall Log.txt
2018-11-01 17:12 - 2018-11-01 17:12 - 000000000 ___HD C:\$SysReset
2018-11-01 17:04 - 2018-11-01 17:04 - 000388608 _____ (Trend Micro Inc.) C:\Users\barte\Downloads\hijackthis.exe
2018-11-01 16:55 - 2018-11-01 16:55 - 000045040 _____ C:\Users\barte\Downloads\[SkT]Tajny_zivot_mazlicku___The_Secret_Life_of_Pets_(2016)(CZ_SK_EN)[1080p]_=_CSFD_67%.torrent
2018-11-01 16:49 - 2018-11-01 16:49 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2018-11-01 16:40 - 2018-11-01 16:40 - 000000640 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2018-11-01 16:39 - 2018-11-08 20:50 - 008620032 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000680960 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000530552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000380408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000293368 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000261120 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000247416 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2018-11-01 16:39 - 2018-11-01 16:39 - 000218112 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000191476 _____ C:\WINDOWS\system32\resTHA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000184036 _____ C:\WINDOWS\system32\resELL.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000179828 _____ C:\WINDOWS\system32\resRUS.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000165460 _____ C:\WINDOWS\system32\resARA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000164948 _____ C:\WINDOWS\system32\resJPN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000164884 _____ C:\WINDOWS\system32\resHEB.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000160260 _____ C:\WINDOWS\system32\resHUN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000160196 _____ C:\WINDOWS\system32\resFRA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158532 _____ C:\WINDOWS\system32\resKOR.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158388 _____ C:\WINDOWS\system32\resDEU.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158356 _____ C:\WINDOWS\system32\resITA.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158148 _____ C:\WINDOWS\system32\resROM.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000158052 _____ C:\WINDOWS\system32\resESN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157652 _____ C:\WINDOWS\system32\resPLK.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157492 _____ C:\WINDOWS\system32\resSKY.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000157332 _____ C:\WINDOWS\system32\resNLD.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156708 _____ C:\WINDOWS\system32\resPTB.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156628 _____ C:\WINDOWS\system32\resCSY.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156596 _____ C:\WINDOWS\system32\resTRK.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000156420 _____ C:\WINDOWS\system32\resPTG.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000155972 _____ C:\WINDOWS\system32\resFIN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000155540 _____ C:\WINDOWS\system32\resHRV.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000155124 _____ C:\WINDOWS\system32\resSVE.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000154964 _____ C:\WINDOWS\system32\resSLV.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000154004 _____ C:\WINDOWS\system32\resNOR.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000153508 _____ C:\WINDOWS\system32\resDAN.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000152164 _____ C:\WINDOWS\system32\resENU.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000150404 _____ C:\WINDOWS\system32\resCHT.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000149524 _____ C:\WINDOWS\system32\resCHS.cui
2018-11-01 16:39 - 2018-11-01 16:39 - 000095224 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000078328 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000068600 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000019456 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000019448 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000018944 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000018944 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2018-11-01 16:39 - 2018-11-01 16:39 - 000013816 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2018-11-01 16:13 - 2018-11-01 16:13 - 003830359 _____ C:\Users\barte\Downloads\HUAWEI ME909u-521 LTE LGA Module Application Guide-%28V100R002_03%2C English%29.pdf
2018-11-01 16:03 - 2018-09-04 23:36 - 001476904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-10-26 22:18 - 2018-10-26 22:21 - 162125811 _____ C:\Users\barte\Downloads\freemapSKtopo.exe
2018-10-26 22:07 - 2018-10-26 22:09 - 173976036 _____ C:\Users\barte\Downloads\freemapSKtopo.gmapsupp.latin1.zip
2018-10-26 21:58 - 2018-10-26 22:00 - 173891389 _____ C:\Users\barte\Downloads\freemapSKtopo.gmapsupp.zip
2018-10-26 21:54 - 2018-10-26 21:54 - 000000000 ____D C:\Users\barte\Downloads\slovakia_garmin
2018-10-26 21:42 - 2018-10-26 21:45 - 112121875 _____ C:\Users\barte\Downloads\slovakia_garmin.zip
2018-10-26 21:40 - 2018-10-26 21:41 - 061095936 _____ C:\Users\barte\Downloads\TOPO4.img
2018-10-26 21:38 - 2018-11-03 22:02 - 000007623 _____ C:\Users\barte\AppData\Local\Resmon.ResmonCfg
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\Documents\Zariadenie Garmin
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Local\GARMIN_Corp
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Local\Garmin
2018-10-26 21:09 - 2018-10-26 21:09 - 000000000 ____D C:\ProgramData\Garmin
2018-10-26 21:08 - 2018-11-01 17:14 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-10-26 21:08 - 2018-10-26 21:09 - 000000000 ____D C:\Users\barte\AppData\Roaming\Garmin
2018-10-26 21:08 - 2018-10-26 21:08 - 000000000 ____D C:\Program Files\DIFX
2018-10-10 17:14 - 2018-09-21 10:23 - 000257848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001786168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001626936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001422648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 001038136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000399672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000228152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2018-10-10 17:14 - 2018-09-21 10:21 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2018-10-10 17:14 - 2018-09-21 10:21 - 000034304 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2018-10-10 17:14 - 2018-09-21 10:18 - 021386888 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-10-10 17:14 - 2018-09-21 10:01 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-10-10 17:14 - 2018-09-21 09:22 - 020381784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-10-10 17:14 - 2018-09-21 09:12 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-10-10 17:14 - 2018-09-21 05:14 - 000661056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-10-10 17:14 - 2018-09-21 05:13 - 000480568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-10-10 17:14 - 2018-09-21 05:12 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-10-10 17:14 - 2018-09-21 05:11 - 000753056 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 004790160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 001427968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-10-10 17:14 - 2018-09-21 05:09 - 001062920 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-10-10 17:14 - 2018-09-21 05:09 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 001456720 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-10-10 17:14 - 2018-09-21 05:08 - 001257864 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-10-10 17:14 - 2018-09-21 05:08 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-10-10 17:14 - 2018-09-21 05:08 - 000982600 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-10-10 17:14 - 2018-09-21 05:08 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-10-10 17:14 - 2018-09-21 05:08 - 000261008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-10-10 17:14 - 2018-09-21 05:08 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-10-10 17:14 - 2018-09-21 05:07 - 000604664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-10-10 17:14 - 2018-09-21 04:58 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-10-10 17:14 - 2018-09-21 04:57 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-10-10 17:14 - 2018-09-21 04:57 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-10-10 17:14 - 2018-09-21 04:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-10-10 17:14 - 2018-09-21 04:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-10-10 17:14 - 2018-09-21 04:53 - 001006080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-10-10 17:14 - 2018-09-21 04:43 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-10-10 17:14 - 2018-09-21 04:42 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-10-10 17:14 - 2018-09-21 04:41 - 003396096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-10-10 17:14 - 2018-09-21 04:40 - 002368000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-10-10 17:14 - 2018-09-21 04:39 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-10-10 17:14 - 2018-09-21 04:38 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-10-10 17:14 - 2018-09-21 04:38 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-10-10 17:14 - 2018-09-21 04:37 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-10-10 17:14 - 2018-09-21 04:37 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 001034240 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-10-10 17:14 - 2018-09-21 04:36 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-10-10 17:14 - 2018-09-20 10:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-10-10 17:14 - 2018-09-20 10:37 - 001634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-10-10 17:14 - 2018-09-20 10:23 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-10-10 17:14 - 2018-09-20 10:22 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-10-10 17:14 - 2018-09-20 10:19 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-10-10 17:14 - 2018-09-20 10:18 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-10-10 17:14 - 2018-09-20 10:18 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-10-10 17:14 - 2018-09-20 10:18 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2018-10-10 17:14 - 2018-09-20 10:17 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-10-10 17:14 - 2018-09-20 10:17 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2018-10-10 17:14 - 2018-09-20 10:16 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2018-10-10 17:14 - 2018-09-20 09:46 - 001454440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-10-10 17:14 - 2018-09-20 09:35 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-10-10 17:14 - 2018-09-20 09:34 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-10-10 17:14 - 2018-09-20 09:30 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-10-10 17:14 - 2018-09-20 09:29 - 002891776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-10-10 17:14 - 2018-09-20 09:29 - 002824704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2018-10-10 17:14 - 2018-09-20 09:29 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-10-10 17:14 - 2018-09-20 09:28 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2018-10-10 17:14 - 2018-09-20 07:43 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14 - 2018-09-20 06:52 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 006569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 006039368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 001989232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 001513032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2018-10-10 17:14 - 2018-09-20 05:29 - 000357056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 001129544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 000581792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-10-10 17:14 - 2018-09-20 05:28 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-10-10 17:14 - 2018-09-20 05:21 - 022013440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-10-10 17:14 - 2018-09-20 05:17 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-10-10 17:14 - 2018-09-20 05:15 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-10-10 17:14 - 2018-09-20 05:13 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-10-10 17:14 - 2018-09-20 05:12 - 000272200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-10-10 17:14 - 2018-09-20 05:12 - 000269128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 005777920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-10-10 17:14 - 2018-09-20 05:11 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-10-10 17:14 - 2018-09-20 05:10 - 001221128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 000566800 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-10-10 17:14 - 2018-09-20 05:10 - 000500536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-10-10 17:14 - 2018-09-20 05:10 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2018-10-10 17:14 - 2018-09-20 05:10 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-10-10 17:14 - 2018-09-20 05:10 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-10-10 17:14 - 2018-09-20 05:09 - 007520096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 007432136 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 002825232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 002462888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 002421248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 001767096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 001097744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000885952 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-10-10 17:14 - 2018-09-20 05:09 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-10-10 17:14 - 2018-09-20 05:09 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-10-10 17:14 - 2018-09-20 05:08 - 004191232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-10-10 17:14 - 2018-09-20 05:08 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-10-10 17:14 - 2018-09-20 04:53 - 025851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-10-10 17:14 - 2018-09-20 04:46 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-10-10 17:14 - 2018-09-20 04:44 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-10-10 17:14 - 2018-09-20 04:44 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-10-10 17:14 - 2018-09-20 04:43 - 000052736 _____ C:\WINDOWS\system32\runexehelper.exe
2018-10-10 17:14 - 2018-09-20 04:42 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-10-10 17:14 - 2018-09-20 04:42 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-10-10 17:14 - 2018-09-20 04:42 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 007577088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-10-10 17:14 - 2018-09-20 04:41 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-10-10 17:14 - 2018-09-20 04:41 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-10-10 17:14 - 2018-09-20 04:40 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2018-10-10 17:14 - 2018-09-20 04:37 - 004615680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-10-10 17:14 - 2018-09-20 04:37 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-10-10 17:14 - 2018-09-20 04:36 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-10-10 17:14 - 2018-09-20 03:21 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-10-10 17:14 - 2018-09-20 02:28 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2018-10-10 17:14 - 2018-09-08 09:12 - 000452112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 002868536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-10-10 17:14 - 2018-09-08 09:07 - 001610552 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000792376 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000689464 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000612360 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000309560 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-10-10 17:14 - 2018-09-08 09:07 - 000144696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-10-10 17:14 - 2018-09-08 09:07 - 000069944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-10-10 17:14 - 2018-09-08 09:03 - 002267136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-10-10 17:14 - 2018-09-08 09:02 - 000645112 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2018-10-10 17:14 - 2018-09-08 09:02 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-10-10 17:14 - 2018-09-08 08:58 - 001639352 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-10-10 17:14 - 2018-09-08 08:58 - 001520744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-10-10 17:14 - 2018-09-08 08:57 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2018-10-10 17:14 - 2018-09-08 08:44 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2018-10-10 17:14 - 2018-09-08 08:43 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2018-10-10 17:14 - 2018-09-08 08:43 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2018-10-10 17:14 - 2018-09-08 08:42 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll
2018-10-10 17:14 - 2018-09-08 08:41 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-10-10 17:14 - 2018-09-08 08:40 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2018-10-10 17:14 - 2018-09-08 08:40 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2018-10-10 17:14 - 2018-09-08 08:40 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2018-10-10 17:14 - 2018-09-08 08:39 - 005505024 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 002052096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 001787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-10-10 17:14 - 2018-09-08 08:39 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 001288192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 001004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2018-10-10 17:14 - 2018-09-08 08:38 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2018-10-10 17:14 - 2018-09-08 08:37 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-10-10 17:14 - 2018-09-08 08:17 - 001540104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-10-10 17:14 - 2018-09-08 08:16 - 000482080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2018-10-10 17:14 - 2018-09-08 08:14 - 001328056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-10-10 17:14 - 2018-09-08 08:13 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-10-10 17:14 - 2018-09-08 08:13 - 000181288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2018-10-10 17:14 - 2018-09-08 08:03 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2018-10-10 17:14 - 2018-09-08 08:03 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2018-10-10 17:14 - 2018-09-08 08:02 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2018-10-10 17:14 - 2018-09-08 08:00 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 001530368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-10-10 17:14 - 2018-09-08 07:59 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 001308672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2018-10-10 17:14 - 2018-09-08 07:58 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 005391360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2018-10-10 17:14 - 2018-09-08 07:57 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2018-10-10 17:14 - 2018-09-08 07:57 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2018-10-10 17:14 - 2018-09-08 07:56 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-10-10 17:14 - 2018-09-08 05:08 - 000462880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-10-10 17:14 - 2018-09-08 04:59 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-10-10 17:14 - 2018-09-08 04:59 - 000361544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-10-10 17:14 - 2018-09-08 04:58 - 000744976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-10-10 17:14 - 2018-09-08 04:58 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2018-10-10 17:14 - 2018-09-08 04:58 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 002571128 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 001016984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-10-10 17:14 - 2018-09-08 04:57 - 000482384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000368448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2018-10-10 17:14 - 2018-09-08 04:57 - 000267576 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-10-10 17:14 - 2018-09-08 04:51 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-10-10 17:14 - 2018-09-08 04:45 - 000295416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2018-10-10 17:14 - 2018-09-08 04:45 - 000286824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2018-10-10 17:14 - 2018-09-08 04:44 - 001980984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-10-10 17:14 - 2018-09-08 04:44 - 000829752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-10-10 17:14 - 2018-09-08 04:43 - 001174448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-10-10 17:14 - 2018-09-08 04:43 - 000269104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2018-10-10 17:14 - 2018-09-08 04:32 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2018-10-10 17:14 - 2018-09-08 04:31 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-10-10 17:14 - 2018-09-08 04:31 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2018-10-10 17:14 - 2018-09-08 04:30 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2018-10-10 17:14 - 2018-09-08 04:30 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 004771840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2018-10-10 17:14 - 2018-09-08 04:29 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2018-10-10 17:14 - 2018-09-08 04:29 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000481280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-10-10 17:14 - 2018-09-08 04:28 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Proxy.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2018-10-10 17:14 - 2018-09-08 04:27 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 002328064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll
2018-10-10 17:14 - 2018-09-08 04:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 003553792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-10-10 17:14 - 2018-09-08 04:25 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 001457664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 001096704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-10-10 17:14 - 2018-09-08 04:24 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2018-10-10 17:14 - 2018-09-08 04:24 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 001655296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2018-10-10 17:14 - 2018-09-08 04:23 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2018-10-10 17:14 - 2018-09-08 04:22 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-08 21:29 - 2018-07-11 22:35 - 000882158 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-08 21:29 - 2018-07-11 20:53 - 000050080 _____ C:\WINDOWS\system32\perfh01B.dat
2018-11-08 21:29 - 2018-07-11 20:53 - 000012186 _____ C:\WINDOWS\system32\perfc01B.dat
2018-11-08 21:25 - 2018-08-05 11:22 - 000000000 ____D C:\Users\barte\AppData\Roaming\ViberPC
2018-11-08 21:25 - 2018-07-11 23:14 - 000017404 _____ C:\WINDOWS\system32\results.xml
2018-11-08 21:25 - 2018-07-11 19:56 - 000000000 ___RD C:\Users\barte\OneDrive
2018-11-08 21:25 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-08 21:24 - 2018-07-11 23:04 - 000000354 _____ C:\WINDOWS\Tasks\HPCeeScheduleForPe3k.job
2018-11-08 21:24 - 2018-07-11 22:57 - 000000000 ____D C:\ProgramData\Synaptics
2018-11-08 21:24 - 2018-07-11 22:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-08 21:24 - 2018-07-11 20:45 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-11-08 21:24 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-08 21:24 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-08 21:24 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-11-08 21:23 - 2018-08-16 17:23 - 000000000 ____D C:\Users\barte\AppData\LocalLow\Temp
2018-11-08 21:22 - 2018-07-11 22:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-08 20:51 - 2018-07-11 23:34 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2018-11-08 20:51 - 2018-07-11 23:04 - 000003242 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForPe3k
2018-11-08 20:50 - 2018-07-11 20:51 - 000000000 ____D C:\Swsetup
2018-11-08 20:50 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-08 20:50 - 2016-05-03 22:30 - 005375448 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2018-11-08 20:50 - 2016-05-03 22:30 - 000173672 _____ (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
2018-11-08 20:37 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-06 23:26 - 2018-07-11 23:10 - 000000000 ____D C:\Users\barte\AppData\Local\clink
2018-11-06 21:17 - 2018-07-31 20:53 - 000000000 ____D C:\Users\barte\AppData\Roaming\vlc
2018-11-06 20:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-04 21:34 - 2018-07-11 22:24 - 000000000 ____D C:\Users\barte
2018-11-04 19:06 - 2018-07-16 12:58 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-11-04 19:06 - 2018-07-16 12:58 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-11-01 21:43 - 2018-07-31 20:07 - 000000000 ____D C:\Users\barte\Documents\BIP motors
2018-11-01 21:33 - 2018-07-16 12:53 - 000000000 ____D C:\Users\barte\AppData\Local\StimulsoftReportsResources
2018-11-01 17:17 - 2018-08-05 10:17 - 000000000 ____D C:\Program Files (x86)\WinCDEmu
2018-11-01 17:16 - 2018-08-09 19:30 - 000000000 ____D C:\ProgramData\Ashampoo
2018-11-01 17:14 - 2018-09-02 15:53 - 000000000 ____D C:\Program Files (x86)\CMS
2018-11-01 17:05 - 2018-07-11 19:54 - 000000000 ____D C:\Users\barte\AppData\Local\VirtualStore
2018-11-01 16:40 - 2018-07-11 23:03 - 000000652 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2018-11-01 16:39 - 2018-07-11 22:24 - 000072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-11-01 16:39 - 2018-04-12 18:08 - 000069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2018-11-01 15:58 - 2018-07-11 21:48 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-11-01 15:51 - 2018-08-05 11:22 - 000000000 ____D C:\Users\barte\Documents\ViberDownloads
2018-10-26 22:30 - 2018-07-11 20:45 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-10-26 21:12 - 2018-07-11 23:39 - 000000000 ____D C:\ProgramData\Epson
2018-10-26 21:12 - 2018-07-11 22:33 - 000000000 ____D C:\ProgramData\Packages
2018-10-26 21:07 - 2018-07-11 20:16 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-10-26 21:06 - 2018-07-16 13:14 - 000000000 ____D C:\Users\barte\AppData\LocalLow\Adobe
2018-10-17 19:35 - 2018-07-18 20:23 - 000000000 ____D C:\Users\barte\AppData\Local\D3DSCache
2018-10-17 19:32 - 2018-07-11 21:03 - 000559880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-10-17 19:31 - 2018-07-11 22:28 - 000003364 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-502565617-607509685-159583452-1001
2018-10-17 19:31 - 2018-07-11 22:24 - 000002363 _____ C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-10-17 19:29 - 2018-07-11 22:47 - 000000626 _____ C:\Users\barte\advanced_ip_scanner_MAC.bin
2018-10-17 19:29 - 2018-07-11 22:47 - 000000015 _____ C:\Users\barte\advanced_ip_scanner_Comments.bin
2018-10-17 19:29 - 2018-07-11 22:47 - 000000015 _____ C:\Users\barte\advanced_ip_scanner_Aliases.bin
2018-10-10 20:37 - 2018-08-09 20:28 - 000000000 ____D C:\Users\barte\AppData\Roaming\GHISLER
2018-10-10 19:08 - 2018-07-11 19:54 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-10-10 19:08 - 2018-07-11 19:54 - 000000000 ___RD C:\Users\barte\3D Objects
2018-10-10 17:36 - 2018-07-11 21:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-10-10 17:31 - 2018-07-11 21:02 - 136745976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-10-10 17:22 - 2018-07-11 22:23 - 000510936 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-10-10 17:22 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-10-10 16:48 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF

==================== Files in the root of some directories =======

2018-09-02 15:53 - 2018-09-02 15:53 - 000058076 _____ () C:\Program Files (x86)\CMS Setup Log.txt
2018-11-01 17:13 - 2018-11-01 17:14 - 000024983 _____ () C:\Program Files (x86)\CMS Uninstall Log.txt
2018-10-26 21:38 - 2018-11-03 22:02 - 000007623 _____ () C:\Users\barte\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-11 22:23

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07.11.2018
Ran by Pe3k (08-11-2018 21:30:22)
Running from C:\Users\barte\Downloads
Windows 10 Education Version 1803 17134.345 (X64) (2018-07-11 21:28:38)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-502565617-607509685-159583452-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-502565617-607509685-159583452-503 - Limited - Disabled)
Guest (S-1-5-21-502565617-607509685-159583452-501 - Limited - Disabled)
Pe3k (S-1-5-21-502565617-607509685-159583452-1001 - Administrator - Enabled) => C:\Users\barte
WDAGUtilityAccount (S-1-5-21-502565617-607509685-159583452-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Advanced IP Scanner 2.5 (HKLM-x32\...\{534F1195-83BF-4B97-9584-FB8363AAC01E}) (Version: 2.5.3646 - Famatech)
APLI Master (HKLM-x32\...\{4767CC38-E667-4447-B60C-4C0721C1E091}) (Version: 6.4.15 - APLI Paper S.A.) Hidden
APLI Master (HKLM-x32\...\InstallShield_{4767CC38-E667-4447-B60C-4C0721C1E091}) (Version: 6.4.15 - APLI Paper S.A.)
Ashampoo Burning Studio 19 (HKLM-x32\...\{91B33C97-BA3F-5C99-C2A6-0EB17CC9054B}_is1) (Version: 19.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 12 v.12.0.4 (HKLM-x32\...\{C92AB6F1-691B-9629-9ECD-7291A9DF25A8}_is1) (Version: 12.0.4 - Ashampoo GmbH & Co. KG)
Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.448 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C8730B1A-133D-4546-8E21-9EC186341F20}) (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (x64) (HKLM\...\{67D57366-EFCC-46DA-BB1F-BBE89B377177}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (HKLM\...\{1253ED86-69FD-4A7B-BDF2-96A522583A88}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (HKLM\...\{72922AB6-F920-4C98-985D-EC90CE0918D4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (HKLM\...\{9782A612-03A7-488F-A598-33558163D8F8}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CS (x64) (HKLM\...\{300DB480-7301-436A-A312-B695B2BC6D71}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CT (x64) (HKLM\...\{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (HKLM\...\{02C85FBD-87D3-4352-BF2E-AFE897CD5559}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CZ (x64) (HKLM\...\{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - DE (x64) (HKLM\...\{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (HKLM\...\{A66E09BB-9892-421D-9EB9-311D12AA5244}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - EN (x64) (HKLM\...\{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - ES (x64) (HKLM\...\{B1452C41-DC90-4B58-8320-ABB515E87FFB}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (HKLM\...\{6E6D1438-33CC-413B-BC96-3497B1271CDD}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (HKLM\...\{5FB5FF89-0938-49D9-850B-53B78B84A7E4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - FR (x64) (HKLM\...\{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM (x64) (HKLM\...\{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (HKLM\...\{FB081BA0-08D2-4C8C-9E55-788A90430BE3}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IT (x64) (HKLM\...\{8285FEBA-D373-493F-BC78-934F84A0A298}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - JP (x64) (HKLM\...\{F5A1D3E4-416E-4723-AD35-86A372B99174}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - NL (x64) (HKLM\...\{A7922CC8-0EBD-497B-B381-5B3992905327}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (HKLM\...\{04D8C47E-C0FE-4CA5-8878-91ECD9552109}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PL (x64) (HKLM\...\{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (HKLM\...\{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - RU (x64) (HKLM\...\{B83D220A-33AB-4AF5-963A-887BD971270E}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (HKLM\...\{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (HKLM\...\{48DD8181-A983-447B-9660-A55A935CA751}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (HKLM\...\{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (HKLM\...\{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (HKLM\...\{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (HKLM\...\{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 -TR (x64) (HKLM\...\{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}) (Version: 18.0 - Corel Corporation) Hidden
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{AB8BE3EA-01D3-44B7-8E77-A9601CBDEBDE}) (Version: 3.10.0085 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
EPSON Scan PDF EXtensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)
Epson Software Updater (HKLM-x32\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.77 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP 3D DriveGuard (HKLM\...\{7371AB00-AC38-4819-8329-7DAF05C9CC46}) (Version: 5.1.7.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{F322B446-B157-4257-B44F-4F22D41F8EDB}) (Version: 8.6.18.11 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{71F817B3-541F-41E2-BBE3-53C6E15EAEFF}) (Version: 12.9.24.3 - HP Inc.)
HP Universal Camera Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1114.3_WHQL - Sonix)
HP Wireless Button Driver (HKLM-x32\...\{EFA01423-3857-468C-B7B6-F30AA08E50BC}) (Version: 1.1.5.1 - Hewlett-Packard Company)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
IPM_Common_x64 (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.9.389 - Your Company Name) Hidden
K-Lite Codec Pack 14.3.6 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.3.6 - KLCP)
MediaInfo 18.05 (HKLM\...\MediaInfo) (Version: 18.05 - MediaArea.net)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-502565617-607509685-159583452-1001\...\OneDriveSetup.exe) (Version: 18.172.0826.0010 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
OBERON (HKLM-x32\...\{68755A70-3A1B-4E70-A5EF-6F2452B77A5A}) (Version: 18.01.04 - EXALOGIC)
Odinštalovať tlačiareň EPSON L6170 Series (HKLM\...\EPSON L6170 Series) (Version: - Seiko Epson Corporation)
Odinštalovať tlačiareň EPSON Remote Print (HKLM\...\EPSON Remote Print) (Version: - SEIKO EPSON Corporation)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
Panoramic Camera Software (HKLM-x32\...\{8068576F-E02C-42FE-AA7A-B40DE37EC239}) (Version: 4.3.2 - common) Hidden
Panoramic Camera Software (HKLM-x32\...\InstallShield_{8068576F-E02C-42FE-AA7A-B40DE37EC239}) (Version: 4.3.2 - common)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Príručky EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.54.0.0 - Seiko Epson Corporation)
SilverCrest STMS 2017 A1 Driver (HKLM-x32\...\{1E494817-D81E-4B0E-B379-F34DF4DCDA58}) (Version: 1.0 - SilverCrest)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.63 - Synaptics Incorporated)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.2-23733 - Synology)
Synology Surveillance Station Client (HKLM\...\Synology Surveillance Station Client) (Version: 1.1.4.0406 - Synology)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.26558 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - )
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{8CFAB044-7D2E-4655-B86D-99932E988980}) (Version: 2.45.0.0 - Microsoft Corporation)
Viber (HKLM-x32\...\{EB5ED85E-A993-4615-9027-A00679FD8790}) (Version: 9.3.0.4 - Viber Media Inc.) Hidden
Viber (HKU\S-1-5-21-502565617-607509685-159583452-1001\...\{2f7404d1-d03c-4354-8aa6-a5b5d4a41205}) (Version: 9.3.0.4 - Viber Media Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
WinRAR 5.60 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.60.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-502565617-607509685-159583452-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-11-01] (Intel Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2A57A5F7-7A27-4DA2-9352-246704B7A4B2} - System32\Tasks\Driver Booster SkipUAC (Pe3k) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe
Task: {2F9BF0DD-DE08-49BC-8D97-9B5CD7712EE3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-11-21] (HP Inc.)
Task: {325231DD-0006-4E6A-8189-1FB9AAC9C252} - System32\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE [2017-06-07] (Seiko Epson Corporation)
Task: {470512E1-484A-4CA4-AF0C-E6322A3966A9} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {4A9A2801-4808-4F3E-AECD-E9411806CFFF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {537A5F6D-B4D0-4335-A505-AC97DD49BA69} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {594073B3-C607-469A-AF35-737B3A7928AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {6E4FB26C-A3E6-45E2-9927-C6766F6EF789} - System32\Tasks\HPCeeScheduleForPe3k => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-06-24] (HP Inc.)
Task: {748E4697-A940-4964-B2F2-EFED36D77ED0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-08-21] (HP Inc.)
Task: {776C1384-38EE-49D1-BDC3-74DD8CDE29F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-11-21] (HP Inc.)
Task: {934AAC9F-D34F-4ACC-8AC2-2CA07829D594} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {9988D8EA-449B-4221-8973-AD4BBC1F5545} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {A0046DDD-20E8-4F0A-935E-44CF5021AF76} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {B334EF4D-E94C-4754-956E-BEAE80D41D7A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {BA1A8342-66B5-4EBF-B975-BBF3163E1476} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {C97F2E0C-4C92-4A27-B86E-A15777C55E47} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-01] (Microsoft Corporation)
Task: {DAE53DF3-D7D8-4F2F-89F3-CC9371EB2578} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {E092CEDE-2167-4B48-8305-9C8352FB5D3F} - System32\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE [2017-06-07] (Seiko Epson Corporation)
Task: {E0FFFFF4-6469-47F1-B2B1-F66C85219FC9} - System32\Tasks\klcp_update => CodecTweakTool.exe
Task: {EBF4839A-6974-488F-9116-EF2B73818B39} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {FAEAE1C6-9E7A-438D-A15F-74E8E22C9B61} - System32\Tasks\CorelUpdateHelperTask-20821CE9640A8DC2650D08072749E8E7 => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {FD1F1409-7C14-42B9-84AC-AC84E6BBB002} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2018-08-30] (HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\EPSON L6170 Series Update {57ADFBCA-C47A-4116-8E4F-02711BD8CEBB}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE:/EXE:{57ADFBCA-C47A-4116-8E4F-02711BD8CEBB} /F:UpdateWORKGROUP\PB-ELITEBOOK$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L6170 Series Update {BA98BC21-3F11-4A12-8112-18230C58A2D2}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSRE.EXE:/EXE:{BA98BC21-3F11-4A12-8112-18230C58A2D2} /F:UpdateWORKGROUP\PB-ELITEBOOK$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForPe3k.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Nástroj na obnovenie Chromebooku.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jndclpdbaamdhonoechobihbbiimdgai
ShortcutWithArgument: C:\Users\barte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Ubiquiti Device Discovery Tool.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=hmpigflbjeapnknladcfphgkemopofig

==================== Loaded Modules (Whitelisted) ==============

2015-06-10 17:16 - 2018-07-11 22:57 - 000022528 _____ () C:\WINDOWS\system32\fpCSEvtSvc.exe
2018-05-11 12:21 - 2018-05-11 12:21 - 000248856 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-10-10 17:14 - 2018-09-20 04:38 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-10-04 15:04 - 2018-10-04 15:05 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 010978304 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\LibWrapper.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 002810368 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\skypert.dll
2018-10-26 21:09 - 2018-10-26 21:12 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-11-08 20:50 - 2018-11-08 20:50 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2017-07-14 14:26 - 2017-07-14 14:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\de1bde40-8f21-44bc-9d91-a6c2749cfa22\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\d173dbd8-48be-4caf-849b-bf05298f7ee8\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\c0491ac7-638e-4301-95f2-575a39aec321\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\c83e5a01-6a57-4b1c-ac0c-27fe978e352c\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\12a8489d-2609-4692-ac0d-68181819ef06\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\f05e8cbc-00a2-4eab-a22f-c586e4b00f62\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\002f380c-972a-4fc0-8a92-6597c0ba1287\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\63d67206-aa85-4dc1-8f40-67228476b22d\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\82f79cae-2085-45e0-821e-9c5f660ce8e1\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\1d54a39c-da6b-419d-8b7e-670c6e55df82\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\f2c75dca-90a9-4098-9183-a659c465b1cc\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\df813181-3dde-4d14-876a-c736bfec8899\AgileDotNetRT.dll
2018-11-08 21:25 - 2018-11-08 21:25 - 000136590 _____ () C:\Users\barte\AppData\Local\Temp\032e2861-222b-4446-b6ec-850c84afb82d\AgileDotNetRT.dll
2018-07-15 07:44 - 2010-09-03 13:31 - 000053248 _____ () C:\Program Files (x86)\SilverCrest STMS 2017 A1 Driver\UniFunc.dll
2018-11-08 20:28 - 2018-11-03 10:01 - 000047688 _____ () C:\Users\barte\AppData\Local\Viber\qrencode.dll
2018-11-08 20:28 - 2018-11-03 10:01 - 000281160 _____ () C:\Users\barte\AppData\Local\Viber\ViberRTC.dll
2018-11-08 20:28 - 2018-11-03 10:02 - 000472136 _____ () C:\Users\barte\AppData\Local\Viber\imageformats\qsvg.dll
2018-11-08 20:28 - 2018-11-03 10:00 - 000019016 _____ () C:\Users\barte\AppData\Local\Viber\libEGL.DLL
2018-11-08 20:28 - 2018-11-03 10:00 - 002102856 _____ () C:\Users\barte\AppData\Local\Viber\libGLESv2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-502565617-607509685-159583452-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\barte\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\bmw-ninet-ass-girl-ninet-special-marlboro (2).jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4005AD91-7E9F-4507-AF84-1D5B49EA6FE3}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{9D32E688-9E0E-46B4-964A-BD920648E43A}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{16C2348C-D8B8-4F6D-863F-9225C39A80E9}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{A9EC0021-1E9D-42EF-A7A6-CCF8F39104FE}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [UDP Query User{4DFF8F35-81B3-4D86-A700-E37FC7EE87B3}C:\users\barte\downloads\winbox.exe] => (Allow) C:\users\barte\downloads\winbox.exe
FirewallRules: [TCP Query User{978DBDE6-7CD5-4A18-AE76-3D53E9255C27}C:\users\barte\downloads\winbox.exe] => (Allow) C:\users\barte\downloads\winbox.exe
FirewallRules: [{3CC9309C-C2E3-44CC-90CE-1D8D984B89E2}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{D396F2CA-E494-4058-B07B-5A4C66C6A02F}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{FDC7C5EE-6920-4A1D-ABE4-CFB0D8B58038}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{E7C98A7B-DC1F-434F-B4F1-B31D696422DB}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [TCP Query User{04F45D4E-EF81-4BDF-AE42-74B04E004CB1}C:\program files (x86)\mikrotik\winbox.exe] => (Allow) C:\program files (x86)\mikrotik\winbox.exe
FirewallRules: [UDP Query User{C75CEEBF-35AB-4321-B85F-56F0A9A5CC12}C:\program files (x86)\mikrotik\winbox.exe] => (Allow) C:\program files (x86)\mikrotik\winbox.exe
FirewallRules: [{CED8DF22-800E-4045-A915-570DC56E83DD}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{680CB856-9CFC-41A5-BD12-8179891750B9}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe
FirewallRules: [TCP Query User{DDED4BC2-986B-4477-809D-7B3143930709}C:\program files (x86)\panoramic camera software\panoramic camera software.exe] => (Allow) C:\program files (x86)\panoramic camera software\panoramic camera software.exe
FirewallRules: [UDP Query User{8FF63763-311B-44E7-81CF-F08E7B0A7624}C:\program files (x86)\panoramic camera software\panoramic camera software.exe] => (Allow) C:\program files (x86)\panoramic camera software\panoramic camera software.exe
FirewallRules: [TCP Query User{94482009-BB82-4E61-B85B-99107079933A}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [UDP Query User{2E877952-E12A-498C-9F5C-11B4074806ED}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [TCP Query User{8D97132B-62EB-4315-98C5-6015CB280A44}C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe] => (Allow) C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe
FirewallRules: [UDP Query User{9ADA93B5-BAEB-44C8-9078-CE94A11F66F7}C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe] => (Allow) C:\program files\synology\surveillancestationclient\bin\surveillancestationclient.exe
FirewallRules: [TCP Query User{6888B0D9-DFFF-4075-BE25-6AE11D72B4A3}C:\program files (x86)\cms\cms.exe] => (Allow) C:\program files (x86)\cms\cms.exe
FirewallRules: [UDP Query User{E474ECA6-87E4-4E1B-B4C9-0F91435C50EB}C:\program files (x86)\cms\cms.exe] => (Allow) C:\program files (x86)\cms\cms.exe
FirewallRules: [TCP Query User{31C87DC0-62C6-45B7-A5FA-8CF599F18C4C}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{31A1D91C-CFD1-4ED7-864B-17910D1CD107}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{EE448A33-BF2A-4E6E-8D4E-4677C1D776F7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8012A1A8-B181-4ECD-B0CB-9464235BC03D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{ECBDBD95-FC98-466B-8F15-6F33B1D62F70}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6BC3B14B-6E79-4211-9EA3-6EA2B638BDE2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6BF292B9-6ED7-4987-88AF-E05C49B164D6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Restore Points =========================

01-11-2018 16:03:38 Windows Update
03-11-2018 09:17:49 Inštalátor modulov systému Windows
04-11-2018 10:43:56 Inštalátor modulov systému Windows
06-11-2018 21:23:31 Inštalátor modulov systému Windows
08-11-2018 20:29:43 HPSF Applying updates

==================== Faulty Device Manager Devices =============

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/08/2018 09:26:05 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: PB-ELITEBOOK)
Description: httphttp-2147467263

Error: (11/08/2018 09:25:36 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/08/2018 09:25:33 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (11/08/2018 09:08:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Viber.exe, verzia: 9.7.5.6, časová značka: 0x5bcd9aac
Názov chybujúceho modulu: ig7icd32.dll, verzia: 9.17.10.4229, časová značka: 0x5702a994
Kód výnimky: 0xc000041d
Odstup chyby: 0x003e41f6
Identifikácia chybujúceho procesu: 0x196c
Čas spustenia chybujúcej aplikácie: 0x01d47798115af2f4
Cesta chybujúcej aplikácie: C:\Users\barte\AppData\Local\Viber\Viber.exe
Cesta chybujúceho modulu: C:\WINDOWS\SYSTEM32\ig7icd32.dll
Identifikácia hlásenia: d3033bcb-9371-4c1d-af32-97c22f4654d3
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (11/08/2018 09:08:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Viber.exe, verzia: 9.7.5.6, časová značka: 0x5bcd9aac
Názov chybujúceho modulu: ig7icd32.dll, verzia: 9.17.10.4229, časová značka: 0x5702a994
Kód výnimky: 0xc0000005
Odstup chyby: 0x003e41f6
Identifikácia chybujúceho procesu: 0x196c
Čas spustenia chybujúcej aplikácie: 0x01d47798115af2f4
Cesta chybujúcej aplikácie: C:\Users\barte\AppData\Local\Viber\Viber.exe
Cesta chybujúceho modulu: C:\WINDOWS\SYSTEM32\ig7icd32.dll
Identifikácia hlásenia: 17450eb3-abac-4839-8f4c-1ec98f6897a3
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (11/08/2018 08:20:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (11/08/2018 08:17:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8007139F
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (11/08/2018 08:17:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x8007139F
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=e0c42288-980c-4788-a014-c080d2e1926e;NotificationInterval=1440;Trigger=TimerEvent


System errors:
=============
Error: (11/08/2018 09:29:02 PM) (Source: DCOM) (EventID: 10000) (User: PB-ELITEBOOK)
Description: Unable to start a DCOM Server: {417976B7-917D-4F1E-8F14-C18FCCB0B3A8}. The error:
"0"
Happened while starting this command:
C:\Windows\System32\coredpussvr.exe -Embedding

Error: (11/08/2018 09:26:59 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 09:26:59 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 09:25:26 PM) (Source: DCOM) (EventID: 10016) (User: PB-ELITEBOOK)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscCloudBackupProvider
and APPID
Unavailable
to the user PB-ELITEBOOK\Pe3k SID (S-1-5-21-502565617-607509685-159583452-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 09:25:17 PM) (Source: DCOM) (EventID: 10000) (User: PB-ELITEBOOK)
Description: Unable to start a DCOM Server: {417976B7-917D-4F1E-8F14-C18FCCB0B3A8}. The error:
"298"
Happened while starting this command:
C:\Windows\System32\coredpussvr.exe -Embedding

Error: (11/08/2018 09:24:58 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 09:24:58 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/08/2018 09:24:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby npf zlyhalo kvôli nasledujúcej chybe:
This driver has been blocked from loading


Windows Defender:
===================================
Date: 2018-10-17 20:42:24.979
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B1A6A0D4-0BB3-4C04-BE3A-A9CF4F92CB6B}
Scan Type: Antimalware
Scan Parameters: Full Scan

Date: 2018-09-02 20:19:23.743
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: Trojan:Win32/Fuerboos.E!cl
ID: 2147723656
Severity: Závažná
Category: Trójsky kôň
Path: containerfile:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso; file:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso->ashampoo-photo-commander-16.0_9fe0f.exe; webfile:_C:\Users\barte\Downloads\ashampoo-photo-commander-16.0D4D8B76.iso|http://solecifun.ga/ZJYkZIUGISeegNcGv4Z ... 9351547114
Detection Origin: Internet
Detection Type: FastPath
Detection Source: Downloads and attachments
Process Name: Unknown
Signature Version: AV: 1.275.624.0, AS: 1.275.624.0, NIS: 1.275.624.0
Engine Version: AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-09-02 19:48:32.691
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {BB725DEE-7931-416B-87E3-88A733254F06}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-09-02 19:01:10.994
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: HackTool:Win32/Keygen
ID: 2147593794
Severity: Vysoká
Category: Nástroj
Path: file:_H:\Users\PB\Downloads\WIN\All.activation.Windows.7-8-10.v13.8.2017-P2P\All activation\Activators\Windows Loader 2.2.2 by Daz\Windows Loader.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Signature Version: AV: 1.275.617.0, AS: 1.275.617.0, NIS: 1.275.617.0
Engine Version: AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-10-17 20:35:23.669
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version:
Update Source: User
Signature Type:
Update Type:
Current Engine Version:
Previous Engine Version:
Error code: 0x80070652
Error description: Another installation is already in progress. Complete that installation before proceeding with this install.

Date: 2018-10-17 20:34:03.740
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.881.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x80240022
Error description: Program nemôže skontrolovať aktualizácie definícií.

Date: 2018-10-17 20:34:03.739
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.881.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x80240022
Error description: Program nemôže skontrolovať aktualizácie definícií.

Date: 2018-09-12 18:36:08.770
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.275.627.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15200.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved

Date: 2018-09-12 18:36:08.770
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.275.627.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15200.1
Error code: 0x80072ee7
Error description: The server name or address could not be resolved

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz
Percentage of memory in use: 27%
Total physical RAM: 8055.48 MB
Available physical RAM: 5822.01 MB
Total Virtual: 9335.48 MB
Available Virtual: 7198.51 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:166.32 GB) (Free:111.86 GB) NTFS

\\?\Volume{290d8893-0000-0000-0000-100000000000}\ (Vyhradené systémom) (Fixed) (Total:0.54 GB) (Free:0.5 GB) NTFS
\\?\Volume{290d8893-0000-0000-0000-10b729000000}\ () (Fixed) (Total:0.82 GB) (Free:0.34 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 167.7 GB) (Disk ID: 290D8893)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=166.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=838 MB) - (Type=27)

==================== End of Addition.txt ============================

Potřebuji vidět obsah souboru fixlog.txt. Máte ho v C:\Users\barte\Downloads. Děkuji.

Ospravedlnujem sa za meskanie, no bol som mimo...
tu je:
Fix result of Farbar Recovery Scan Tool (x64) Version: 07.11.2018
Ran by Pe3k (08-11-2018 21:23:21) Run:1
Running from C:\Users\barte\Downloads
Loaded Profiles: Pe3k (Available Profiles: Pe3k)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File
Task: {39E985B7-BD7F-4D7C-8C39-CA3B15BF164B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
Task: {64C7596B-0825-4ABA-A8F2-487320A1AA88} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-07-11] (Google Inc.)
C:\Users\barte\AppData\Local\Temp
HKU\S-1-5-21-502565617-607509685-159583452-1001\...\MountPoints2: {ae860742-9c0f-11e8-9f8a-b8763fdb167b} - "E:\HiSuiteDownLoader.exe"
C:\Users\barte\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{39E985B7-BD7F-4D7C-8C39-CA3B15BF164B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39E985B7-BD7F-4D7C-8C39-CA3B15BF164B}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64C7596B-0825-4ABA-A8F2-487320A1AA88}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64C7596B-0825-4ABA-A8F2-487320A1AA88}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Users\barte\AppData\Local\Temp => moved successfully
HKU\S-1-5-21-502565617-607509685-159583452-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ae860742-9c0f-11e8-9f8a-b8763fdb167b} => removed successfully
HKLM\Software\Classes\CLSID\{ae860742-9c0f-11e8-9f8a-b8763fdb167b} => not found
C:\Users\barte\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 875181573 B
Java, Flash, Steam htmlcache => 1110 B
Windows/system/drivers => 134119467 B
Edge => 1520582 B
Chrome => 293790088 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 164626 B
NetworkService => 0 B
barte => 2871426 B

RecycleBin => 5172090918 B
EmptyTemp: => 6 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:24:17 ====

OK. Nastala nějaká změna?

Všimol som si , že ked som otvoril prieskumník ( tento počítač), tak to poblikalo a ukludnilo sa to, no ako náhle som vošiel do zložky Downloads tak sa to šlo zbláznit, tak som všetko s tadial vymazal (Shift+Del)... ale stále to sem tam preblikuje, pustil som to potom aj cez antivir (Win Defender) no nič nenašiel.....

Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Tu je ten log:
Malwarebytes
www.malwarebytes.com

-Podrobnosti denníka-
Dátum skenovania: 14. 11. 2018
Čas skenovania: 22:25
Súbor denníka: c0c55544-e853-11e8-b61f-2c59e50430e3.json

-Údaje o softvéri-
Verzia: 3.6.1.2711
Verzia súčastí: 1.0.482
Aktualizovať verziu balíka: 1.0.7847
Licencia: Skúšobná verzia

-Systémové informácie-
OS: Windows 10 (Build 17134.345)
Procesor: x64
Systém súborov: NTFS
Používateľ: PB-ELITEBOOK\Pe3k

-Zhrnutie skenovania-
Typ skenovania: Vyhľadávanie hrozieb
Skenovanie bolo spustené: Manuálne
Výsledok: Dokončené
Preskenované objekty: 287292
Zistené hrozby: 0
Hrozby umiestnené do karantény: 0
Uplynulý čas: 3 min, 6 s

-Možnosti skenovania-
Pamäť: Povolené
Spúšťanie: Povolené
Systém súborov: Povolené
Archívy: Povolené
Rootkity: Zakázané
Heuristika: Povolené
PUP: Zistiť
PUM: Zistiť

-Podrobnosti skenovania-
Proces: 0
(Nezistili sa nijaké škodlivé položky)

Modul: 0
(Nezistili sa nijaké škodlivé položky)

Kľúč databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Hodnota databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Údaje databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)

Prúd údajov: 0
(Nezistili sa nijaké škodlivé položky)

Priečinok: 0
(Nezistili sa nijaké škodlivé položky)

Súbor: 0
(Nezistili sa nijaké škodlivé položky)

Fyzický sektor: 0
(Nezistili sa nijaké škodlivé položky)

WMI: 0
(Nezistili sa nijaké škodlivé položky)


(end)