VIRY.CZ

Dobrý den, prosím o kontrolu logu, občas vyskočí využití disku D na 100 procent aniž by k tomu měl důvod.

Dávám log z RSIT a FRST.

Děkuji


RSIT LOG
Logfile of random's system information tool 1.10 (written by random/random)
Run by dbube at 2019-04-10 17:09:42
Microsoft Windows 10 Home
System drive C: has 33 GB (29%) free of 114 GB
Total RAM: 16327 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:09:44, on 10.04.2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DriverDoc\DOCTray.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\dbube\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Program Files\trend micro\dbube.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 149.202.196.40 dow0.drivereasy.com
O1 - Hosts: 149.202.196.40 dow1.drivereasy.com
O4 - HKCU\..\Run: [uTorrent] "C:\Users\dbube\AppData\Roaming\uTorrent\utorrent.exe"
O4 - HKCU\..\Run: [Discord] C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - Global Startup: Steam.lnk = C:\Program Files (x86)\Steam\Steam.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem46.inf,%SocketHECIServiceName%;Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
O23 - Service: @oem46.inf,%TPMProvisioningServiceName%;Intel(R) TPM Provisioning Service (Intel(R) TPM Provisioning Service) - Intel(R) Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 8778 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localservice -p -s nsi
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc

"C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r
"C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe" /StartService
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files\rempl\sedsvc.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc

c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"fontdrvhost.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\DriverDoc\DOCTray.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe" gpureading
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"ctfmon.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Users\dbube\AppData\Roaming\uTorrent\utorrent.exe"
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=cs_CZ" "-cachedir=C:\Users\dbube\AppData\Local\Steam\htmlcache" "-steampid=10424" "-buildid=1551832902" "-steamid=0" "-steamuniverse=Dev" "-clientui=C:\Program Files (x86)\Steam\clientui" --disable-out-of-process-pac --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-features=TouchpadAndWheelScrollLatching,AsyncWheelEvents --enable-media-stream --disable-smooth-scrolling --num-raster-threads=4 --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\dbube\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1551832902 --initial-client-data=0x2e4,0x2e0,0x2e8,0x114,0x2f4,0x7ffd63911f78,0x7ffd63911f88,0x7ffd63911f98
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1551832902 --steamid=0 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1551832902 --steamid=0 --service-request-channel-token=1D048549EA3A0BB6198AC234FAFE4BDA --mojo-platform-channel-handle=1248 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=403A6787FBC77F474FB8726C2D1C2456 --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --buildid=1551832902 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=403A6787FBC77F474FB8726C2D1C2456 --renderer-client-id=3 --mojo-platform-channel-handle=1912 /prefetch:1
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=603684564CACDCB229A94F9C8AE425CA --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --buildid=1551832902 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=603684564CACDCB229A94F9C8AE425CA --renderer-client-id=4 --mojo-platform-channel-handle=2368 /prefetch:1
c:\windows\system32\svchost.exe -k unistacksvcgroup


C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s QWAVE
"C:\WINDOWS\System32\Taskmgr.exe" /3
"C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe"
"C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe" --type=gpu-process --enable-features=SharedArrayBuffer --no-sandbox --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=3540596145809856770 --mojo-platform-channel-handle=1436 /prefetch:2
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe --reporter-url=http://crash.discordapp.com:1127/post --application-name=Discord "--crashes-directory=C:\Users\dbube\AppData\Local\Temp\Discord Crashes" --v=1
"C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --force-color-profile=srgb --enable-features=SharedArrayBuffer --service-pipe-token=4566362263597050048 --lang=cs --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\dbube\AppData\Local\Discord\app-0.0.305\resources\app.asar" --node-integration=false --webview-tag=false --no-sandbox --preload="C:\Users\dbube\AppData\Roaming\discord\0.0.305\modules\discord_desktop_core\core.asar\app\mainScreenPreload.js" --background-color=#2f3136 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4566362263597050048 --renderer-client-id=6 --mojo-platform-channel-handle=2604 /prefetch:1
C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe --overlay-host
"C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe" --type=gpu-process --enable-features=SharedArrayBuffer --no-sandbox --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --use-gl=swiftshader-webgl --service-request-channel-token=10829122932105912283 --mojo-platform-channel-handle=1480 /prefetch:2

C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\dbube\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\dbube\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\dbube\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=73.0.3683.86 --initial-client-data=0x1d4,0x1d8,0x1dc,0x1d0,0x1e0,0x7ffd623e6830,0x7ffd623e6840,0x7ffd623e6850
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4652 --on-initialized-event-handle=652 --parent-handle=656 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=16028859854947311882 --mojo-platform-channel-handle=1624 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --lang=cs --service-sandbox-type=network --service-request-channel-token=1127736208323772298 --mojo-platform-channel-handle=2036 /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=1226447808667365522 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=1226447808667365522 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=15715460183855244340 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15715460183855244340 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3088 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=9656125104156014026 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9656125104156014026 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2648 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=12040569946396296736 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=12040569946396296736 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:1
C:\WINDOWS\system32\AUDIODG.EXE 0x7fc
"C:\Users\dbube\AppData\Local\Google\Chrome\User Data\SwReporter\39.195.200.3\software_reporter_tool.exe" --engine=2 --scan-locations=1,2,3,4,5,6,7,8,10,11 --disabled-locations=9 --session-id=bd/4cZ7h9JL1ikZOHkh/2n8PRRAg+nkXaV8Q/CQl --registry-suffix=ESET --srt-field-trial-group-name=NewCleanerUIExperiment
"c:\users\dbube\appdata\local\google\chrome\user data\swreporter\39.195.200.3\software_reporter_tool.exe" --crash-handler "--database=c:\users\dbube\appdata\local\Google\Software Reporter Tool" --url=https://clients2.google.com/cr/report --annotation=plat=Win32 --annotation=prod=ChromeFoil --annotation=ver=39.195.200 --initial-client-data=0x254,0x240,0x264,0x260,0x258,0x7ff692101e18,0x7ff692101e28,0x7ff692101e38
"c:\users\dbube\appdata\local\google\chrome\user data\swreporter\39.195.200.3\software_reporter_tool.exe" --use-crash-handler-with-id="\\.\pipe\crashpad_6624_DMIGLBFLQQGZSJCR" --sandboxed-process-id=2 --init-done-notifier=584 --sandbox-mojo-pipe-token=12735414203549588984 --mojo-platform-channel-handle=712 --engine=2
"c:\users\dbube\appdata\local\google\chrome\user data\swreporter\39.195.200.3\software_reporter_tool.exe" --use-crash-handler-with-id="\\.\pipe\crashpad_6624_DMIGLBFLQQGZSJCR" --sandboxed-process-id=3 --init-done-notifier=916 --sandbox-mojo-pipe-token=2476770650772404928 --mojo-platform-channel-handle=920
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=7158878936105195670 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7158878936105195670 --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=14140642235563366802 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14140642235563366802 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=4409835396378238633 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4409835396378238633 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe94_ Global\UsGthrCtrlFltPipeMssGthrPipe94 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 744 748 756 8192 752
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,1131765923603711898,15044846737013067053,131072 --service-pipe-token=6633075423054496603 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6633075423054496603 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8560 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\dbube\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Driver Easy Scheduled Scan.job - C:\Program Files\Easeware\DriverEasy\DriverEasy.exe --scan

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2017-06-29 9228800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\dbube\AppData\Roaming\uTorrent\utorrent.exe [2015-02-22 416168]
"Discord"=C:\Users\dbube\AppData\Local\Discord\app-0.0.305\Discord.exe [2019-03-07 81780056]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-04-05 17:17:55 ----SHD---- C:\Config.Msi
2019-04-03 18:58:09 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo-1-999-0-0-0.exe
2019-04-03 18:58:09 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2019-04-03 18:58:08 ----A---- C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2019-04-03 18:58:08 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2019-04-03 18:58:04 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1-999-0-0-0.dll
2019-04-03 18:58:04 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2019-04-03 18:58:00 ----A---- C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2019-04-03 18:58:00 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2019-04-03 18:41:05 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-04-03 18:40:05 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2019-04-03 18:23:31 ----A---- C:\WINDOWS\system32\nvofapi64.dll
2019-04-03 18:23:28 ----A---- C:\WINDOWS\SYSWOW64\nvofapi.dll
2019-04-03 18:23:17 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2019-04-03 18:19:50 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-04-03 18:19:45 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2019-04-03 18:19:17 ----A---- C:\WINDOWS\system32\nvdispgenco6441967.dll
2019-04-03 18:18:55 ----A---- C:\WINDOWS\system32\nvdispco6441967.dll
2019-04-03 18:10:30 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2019-04-03 18:10:09 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2019-04-03 18:08:44 ----A---- C:\WINDOWS\system32\nvcuda.dll
2019-04-03 18:07:30 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2019-04-03 18:02:53 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2019-04-03 17:58:48 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2019-04-03 17:57:48 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2019-04-03 17:57:44 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-04-03 17:57:32 ----A---- C:\WINDOWS\system32\nvEncMFThevc.dll
2019-04-03 17:57:26 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFThevc.dll
2019-04-03 17:57:18 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2019-04-03 17:57:12 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2019-04-03 17:57:08 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2019-04-03 17:57:05 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2019-04-03 17:56:54 ----A---- C:\WINDOWS\system32\OpenCL.dll
2019-04-03 17:56:52 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2019-04-03 17:56:48 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2019-04-03 17:56:44 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2019-04-03 17:56:36 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2019-04-03 17:56:31 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2019-04-03 17:56:20 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2019-04-03 17:56:12 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2019-04-03 17:33:08 ----A---- C:\WINDOWS\system32\drivers\ICCWDT.sys
2019-04-03 17:33:07 ----D---- C:\ProgramData\Intel
2019-04-03 17:33:07 ----D---- C:\Program Files\Intel
2019-04-03 17:33:07 ----D---- C:\Program Files (x86)\Intel
2019-04-03 15:29:30 ----D---- C:\Users\dbube\AppData\Roaming\Discord
2019-04-03 14:45:08 ----D---- C:\WINDOWS\system32\DAX3
2019-04-03 14:45:08 ----D---- C:\WINDOWS\system32\DAX2
2019-04-03 14:45:08 ----D---- C:\ProgramData\Audyssey Labs
2019-04-03 14:45:03 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2019-04-03 14:45:03 ----D---- C:\Program Files\Realtek
2019-04-03 14:44:31 ----A---- C:\WINDOWS\SYSWOW64\SRCOM.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\SYSWOW64\SEHDHF32.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\SYSWOW64\SECOMN32.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\YamahaAE3.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\YamahaAE2.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\YamahaAE.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tossaemaxapo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tossaeapo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\toseaeapo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tosasfapo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tosade.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tepeqapo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tbb_waves.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tadefxapo264.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\tadefxapo.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRRPTR64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRCOM64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRCOM.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SRAPO64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\sltech64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\slprp64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\slcnt64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\sl3apo64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SEHDRA64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SEHDHF64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SECOMN64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\SEAPO64.dll
2019-04-03 14:44:31 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2019-04-03 14:44:30 ----A---- C:\WINDOWS\SYSWOW64\RltkAPO.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\drivers\rtkSSTsetting.dat
2019-04-03 14:44:30 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\NAHIMICV3apo.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\NAHIMICV2apo.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\NahimicAPONSControl.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MISS_APO.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2019-04-03 14:44:29 ----A---- C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioRender64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioCapture64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO30.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\KAAPORT64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\IntelSSTAPO.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\ICEsoundAPO64.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMUI.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMLimiter.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMHVS.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMEQ_Voice.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMEQ.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMClariFi.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HMAPO.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2019-04-03 14:44:28 ----A---- C:\WINDOWS\system32\HiFiDAX2API.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\HarmanAudioInterface.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSU2PREC64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSU2PLFX64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSU2PGFX64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPP64AF3.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPO64AF3.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPD64AF3.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPA64F3.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DDPA64.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DAX3APOv251.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\DAX3APOProp.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\CX64Proxy.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\CX64APO.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\CAF64APO2.dll
2019-04-03 14:44:27 ----A---- C:\WINDOWS\system32\Caf64api.dll
2019-04-03 14:44:26 ----D---- C:\Program Files (x86)\Realtek
2019-04-03 14:44:26 ----A---- C:\WINDOWS\system32\AudysseyEfx.dll
2019-04-03 14:44:26 ----A---- C:\WINDOWS\system32\audioLibVc.dll
2019-04-03 14:44:26 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2019-04-03 14:44:26 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2019-04-03 14:44:26 ----A---- C:\WINDOWS\system32\AcpiServiceVnA64.dll
2019-04-03 14:44:25 ----HD---- C:\Program Files (x86)\Temp
2019-04-03 14:44:25 ----A---- C:\WINDOWS\RtlExUpd.dll
2019-04-03 14:41:59 ----A---- C:\WINDOWS\system32\WdfCoInstaller01011.dll
2019-04-03 14:41:59 ----A---- C:\WINDOWS\system32\drivers\XtuAcpiDriver.sys
2019-04-03 14:41:22 ----A---- C:\WINDOWS\system32\drivers\iaStorA.sys
2019-04-03 14:41:21 ----A---- C:\WINDOWS\system32\drivers\ISCTD64.sys
2019-04-03 14:38:14 ----D---- C:\Users\dbube\AppData\Roaming\Obsidium
2019-04-03 14:37:36 ----D---- C:\Users\dbube\AppData\Roaming\Easeware
2019-04-03 14:37:34 ----D---- C:\Program Files\Easeware
2019-04-01 13:43:19 ----D---- C:\Users\dbube\AppData\Roaming\DriverDoc
2019-04-01 13:43:16 ----D---- C:\Program Files (x86)\DriverDoc
2019-03-28 15:40:36 ----D---- C:\Users\dbube\AppData\Roaming\CitizenFX
2019-03-13 18:34:38 ----D---- C:\WINDOWS\Panther
2019-03-13 16:05:29 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2019-03-13 16:05:29 ----A---- C:\WINDOWS\SYSWOW64\AppResolver.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\SYSWOW64\cdprt.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\system32\sppobjs.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\system32\domgmt.dll
2019-03-13 16:05:28 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\system32\dosvc.dll
2019-03-13 16:05:27 ----A---- C:\WINDOWS\system32\AppResolver.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\system32\cdprt.dll
2019-03-13 16:05:26 ----A---- C:\WINDOWS\system32\cdp.dll
2019-03-13 16:05:25 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2019-03-13 16:05:25 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2019-03-13 16:05:25 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\system32\StartTileData.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2019-03-13 16:05:24 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\system32\srpapi.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2019-03-13 16:05:23 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2019-03-13 16:05:23 ----A---- C:\WINDOWS\system32\audiosrv.dll
2019-03-13 16:05:23 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2019-03-13 16:05:22 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\OpcServices.dll
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\drivers\exfat.sys
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys
2019-03-13 16:05:22 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\urlmon.dll
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\kernel32.dll
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\hal.dll
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2019-03-13 16:05:21 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\system32\vbscript.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\system32\jscript9.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2019-03-13 16:05:20 ----A---- C:\WINDOWS\system32\hvax64.exe
2019-03-13 16:05:20 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\SYSWOW64\AcLayers.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\NMAA.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\msxml3.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\audiodg.exe
2019-03-13 16:05:19 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-03-13 16:05:18 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2019-03-13 16:05:18 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2019-03-13 16:05:18 ----A---- C:\WINDOWS\system32\win32kfull.sys
2019-03-13 16:05:18 ----A---- C:\WINDOWS\system32\rascustom.dll
2019-03-13 16:05:18 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2019-03-13 16:05:18 ----A---- C:\WINDOWS\system32\ieframe.dll
2019-03-13 16:05:18 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2019-03-13 16:05:17 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2019-03-13 16:05:17 ----A---- C:\WINDOWS\system32\policymanager.dll
2019-03-13 16:05:17 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2019-03-13 16:05:17 ----A---- C:\WINDOWS\system32\jscript.dll
2019-03-13 16:05:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2019-03-13 16:05:17 ----A---- C:\WINDOWS\system32\hvix64.exe
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\propsys.dll
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\msv1_0.dll
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\drivers\http.sys
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\combase.dll
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\AudioSes.dll
2019-03-13 16:05:16 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\win32kbase.sys
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\msxml6.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\msi.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\mos.dll
2019-03-13 16:05:15 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\msctf.dll
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\aitstatic.exe
2019-03-13 16:05:14 ----A---- C:\WINDOWS\system32\AcLayers.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\wlansvc.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\wininet.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\localspl.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\iertutil.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\edgeIso.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2019-03-13 16:05:13 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2019-03-13 16:05:12 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2019-03-13 16:05:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2019-03-13 16:05:11 ----A---- C:\WINDOWS\system32\msvproc.dll
2019-03-13 16:05:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\system32\MapsStore.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\system32\MapRouter.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2019-03-13 16:05:10 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2019-03-13 16:05:09 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2019-03-13 16:05:09 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2019-03-13 16:05:09 ----A---- C:\WINDOWS\system32\BingMaps.dll
2019-03-13 16:05:09 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2019-03-13 16:05:08 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2019-03-13 16:05:07 ----A---- C:\WINDOWS\system32\fcon.dll
2019-03-13 16:05:06 ----A---- C:\WINDOWS\system32\moshostcore.dll
2019-03-13 16:05:06 ----A---- C:\WINDOWS\system32\lpasvc.dll
2019-03-13 16:05:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-13 16:05:01 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\winresume.exe
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\winload.exe
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\hvloader.dll
2019-03-13 16:05:01 ----A---- C:\WINDOWS\system32\AudioEng.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\mcbuilder.exe
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\wsp_health.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\wimserv.exe
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\wimgapi.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\wer.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\resutils.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\reseteng.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\ReAgent.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\rasmans.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\pcasvc.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\invagent.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\generaltel.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\devinv.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\dcntel.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\clusapi.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\appraiser.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\aepic.dll
2019-03-13 16:05:00 ----A---- C:\WINDOWS\system32\aeinv.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\dpx.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\WerFault.exe
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\weretw.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\systemreset.exe
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\msvcp_win.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\mf3216.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\gpsvc.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\dpx.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2019-03-13 16:04:59 ----A---- C:\WINDOWS\system32\acmigration.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\SYSWOW64\RTWorkQ.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\SYSWOW64\msvcp_win.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\werui.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\taskhostw.exe
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\RTWorkQ.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\mprddm.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\Faultrep.dll
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\drivers\npfs.sys
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2019-03-13 16:04:58 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2019-03-13 16:04:57 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2019-03-13 16:04:57 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\tzres.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\drivers\msfs.sys
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2019-03-13 16:04:57 ----A---- C:\WINDOWS\system32\AppLockerCSP.dll

======List of files/folders modified in the last 1 month======

2019-04-10 17:09:43 ----D---- C:\WINDOWS\Temp
2019-04-10 17:09:43 ----D---- C:\Program Files\trend micro
2019-04-10 17:09:22 ----D---- C:\Users\dbube\AppData\Roaming\uTorrent
2019-04-10 17:05:58 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-04-10 16:30:23 ----D---- C:\WINDOWS\system32\catroot2
2019-04-10 16:11:00 ----D---- C:\WINDOWS\system32\sru
2019-04-10 13:24:39 ----D---- C:\WINDOWS\system32\config
2019-04-10 13:22:13 ----D---- C:\WINDOWS\WinSxS
2019-04-10 13:21:30 ----D---- C:\WINDOWS\Prefetch
2019-04-10 13:18:51 ----D---- C:\Windows
2019-04-10 13:18:50 ----D---- C:\WINDOWS\SysWOW64
2019-04-10 13:15:17 ----D---- C:\WINDOWS\system32\MRT
2019-04-10 13:15:15 ----AC---- C:\WINDOWS\system32\MRT.exe
2019-04-10 13:13:41 ----D---- C:\Program Files (x86)\Steam
2019-04-10 13:12:35 ----HD---- C:\Program Files\WindowsApps
2019-04-10 13:12:19 ----D---- C:\WINDOWS\AppReadiness
2019-04-10 13:11:24 ----D---- C:\WINDOWS\system32\drivers\wd
2019-04-10 13:10:04 ----D---- C:\ProgramData\NVIDIA
2019-04-06 18:18:02 ----D---- C:\WINDOWS\System32
2019-04-06 18:18:02 ----D---- C:\WINDOWS\INF
2019-04-06 18:18:02 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-06 18:13:15 ----D---- C:\WINDOWS\system32\Tasks
2019-04-06 18:11:55 ----D---- C:\WINDOWS\system32\drivers
2019-04-05 17:18:09 ----SHDC---- C:\WINDOWS\Installer
2019-04-05 17:18:08 ----D---- C:\Program Files\rempl
2019-04-03 18:59:22 ----D---- C:\WINDOWS\system32\DriverStore
2019-04-03 17:58:44 ----A---- C:\WINDOWS\system32\nvapi64.dll
2019-04-03 17:57:44 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2019-04-03 17:33:07 ----RD---- C:\Program Files (x86)
2019-04-03 17:33:07 ----RD---- C:\Program Files
2019-04-03 17:33:07 ----HD---- C:\ProgramData
2019-04-03 17:33:05 ----A---- C:\WINDOWS\system32\vcruntime140.dll
2019-04-03 17:33:04 ----A---- C:\WINDOWS\system32\msvcp140.dll
2019-04-03 17:32:57 ----A---- C:\WINDOWS\SYSWOW64\vcruntime140.dll
2019-04-03 17:32:55 ----A---- C:\WINDOWS\SYSWOW64\msvcp140.dll
2019-04-03 14:44:26 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2019-04-03 14:37:36 ----D---- C:\WINDOWS\Tasks
2019-04-01 19:51:39 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2019-03-30 21:22:13 ----D---- C:\Users\dbube\AppData\Roaming\vlc
2019-03-19 17:02:59 ----D---- C:\WINDOWS\system32\LogFiles
2019-03-18 18:11:54 ----D---- C:\WINDOWS\system32\SleepStudy
2019-03-18 16:15:48 ----D---- C:\WINDOWS\Logs
2019-03-18 16:14:43 ----RD---- C:\WINDOWS\Microsoft.NET
2019-03-17 08:48:03 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2019-03-17 08:48:03 ----A---- C:\WINDOWS\system32\nvcpl.dll
2019-03-17 08:48:01 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2019-03-17 08:48:01 ----A---- C:\WINDOWS\system32\nvshext.dll
2019-03-17 08:48:01 ----A---- C:\WINDOWS\system32\nvmctray.dll
2019-03-17 08:48:01 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2019-03-17 08:48:01 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2019-03-17 08:33:12 ----A---- C:\WINDOWS\NvContainerRecovery.bat
2019-03-13 18:33:45 ----SD---- C:\WINDOWS\system32\UNP
2019-03-13 18:33:45 ----RSD---- C:\WINDOWS\Fonts
2019-03-13 18:33:45 ----RD---- C:\Program Files\Windows Defender
2019-03-13 18:33:45 ----D---- C:\WINDOWS\TextInput
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\migration
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\en-US
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\zu-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\yo-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\xh-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\wo-SN
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\tn-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\ti-ET
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\rw-RW
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\oobe
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\nso-ZA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\migration
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\ig-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\chr-CHER-US
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\en-US
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\cs-CZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2019-03-13 18:33:45 ----D---- C:\WINDOWS\system32\appraiser
2019-03-13 18:33:45 ----D---- C:\WINDOWS\ShellExperiences
2019-03-13 18:33:45 ----D---- C:\WINDOWS\bcastdvr
2019-03-13 18:33:45 ----D---- C:\WINDOWS\apppatch
2019-03-13 18:33:45 ----D---- C:\Program Files (x86)\Windows Defender
2019-03-13 18:33:44 ----D---- C:\WINDOWS\system32\Boot
2019-03-13 16:07:16 ----D---- C:\WINDOWS\CbsTemp
2019-03-12 18:38:22 ----SD---- C:\Users\dbube\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2019-04-03 1469952]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-12-08 58168]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2017-06-07 138296]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-07-14 414720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-12-08 43008]
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2013-03-01 36600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2018-12-08 82432]
R3 ICCWDT;@oem47.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2019-04-03 39504]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2017-06-29 5826560]
R3 ISCT;@oem5.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2019-04-03 47008]
R3 MEIx64;@oem46.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2019-04-03 223832]
R3 NVHDA;@oem42.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2019-02-08 228768]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c5dc31c3a136544a\nvlddmkm.sys [2019-04-03 20746632]
R3 nvoclk64;@oem29.inf,%NVRing0.SVCDESC%;NVIDIA Enthusiasts Platform KDM; C:\WINDOWS\system32\DRIVERS\nvoclk64.sys [2009-09-15 42088]
R3 nvvad_WaveExtensible;@oem44.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2018-10-01 70024]
R3 nvvhci;@oem43.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2018-10-03 66792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2018-04-12 604160]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-08-03 128920]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2018-06-15 48544]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2019-01-09 92704]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 dg_ssudbus;@oem0.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2016-09-05 131712]
S3 DM150Drv;DM150Drv; C:\WINDOWS\System32\drivers\DM150Drv.sys [2010-07-30 24312]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 Hamachi;@oem41.inf,%Hamachi.Service.DispName%;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2018-11-23 45680]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2019-03-06 76088]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2019-01-16 30336]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2018-01-24 468752]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2019-03-06 945464]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2016-12-21 40240]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S3 ss_conn_usb_driver;SAMSUNG Mobile USB Connectivity Device Driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [2014-01-22 26368]
S3 ssudcdf;SAMSUNG Mobile Mode Changer Device; C:\WINDOWS\System32\drivers\ssudcdf.sys [2014-01-22 36608]
S3 ssuddmgr;SAMSUNG Mobile USB Device Management Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssuddmgr.sys [2014-01-22 206080]
S3 ssudmdm;@oem1.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2016-09-05 165504]
S3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudobex.sys [2014-01-22 206080]
S3 ssudqcfilter;SAMSUNG Mobile USB QCRMNET Filter Driver; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [2016-09-05 64640]
S3 ssudrmnet;SAMSUNG Mobile USB RMNET Drivers; C:\WINDOWS\System32\drivers\ssudrmnet.sys [2014-01-22 70400]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudserd.sys [2014-01-22 206080]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 CDPUserSvc_3715b93;Uživatelská služba platformy připojených zařízení_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R2 nTuneService;Performance Service; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [2011-09-19 278336]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2019-01-30 790920]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2019-03-17 767016]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2019-01-30 790920]
R2 OneSyncSvc_3715b93;Hostitel synchronizace_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-07-14 760888]
R2 sedsvc;Windows Remediation Service; C:\Program Files\rempl\sedsvc.exe [2019-03-30 338744]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2019-03-06 1693984]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-02-28 153168]
S2 Intel(R) TPM Provisioning Service;@oem46.inf,%TPMProvisioningServiceName%;Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [2019-04-03 737552]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2019-03-07 3171144]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BcastDVRUserService_3715b93;Uživatelská služba pro GameDVR a vysílání her_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BluetoothUserService_3715b93;Služba pro podporu uživatelů Bluetooth_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicePickerUserSvc_3715b93;DevicePicker_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevicesFlowUserSvc_3715b93;Tok zařízení_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-08-03 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2019-02-04 781440]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-25 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\elevation_service.exe [2019-03-20 1268720]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-02-28 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 Intel(R) Capability Licensing Service TCP IP Interface;@oem46.inf,%SocketHECIServiceName%;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [2019-04-03 761088]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 MessagingService_3715b93;Služba zasílání zpráv_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2019-01-30 790920]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2019-03-07 2298688]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PimIndexMaintenanceSvc_3715b93;Data kontaktů_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PrintWorkflowUserSvc_3715b93;PrintWorkflow_3715b93; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2019-01-09 85472]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-06-08 976384]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2019-01-09 85472]
S4 ssh-agent;OpenSSH Authentication Agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [2018-03-10 495616]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-10-2019
# Duration: 00:00:01
# OS: Windows 10 Home
# Cleaned: 6
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\DriverDoc
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverDoc
Deleted C:\Users\dbube\AppData\Roaming\DriverDoc

***** [ Files ] *****

Deleted C:\Users\dbube\Desktop\DriverDoc.lnk

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\DriverDoc
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\DriverDoc_is1

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1286 octets] - [17/02/2019 17:51:33]
AdwCleaner[C00].txt - [1432 octets] - [17/02/2019 17:51:54]
AdwCleaner[S01].txt - [1758 octets] - [10/04/2019 18:59:25]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

OK. Dejte nové logy FRST+Addition.

PŘÍLOHA

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-4246267622-4105470206-3163352383-1001\...\MountPoints2: F - "F:\setup.exe"
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
Task: {6A2BF228-8D9E-472B-BC2A-925E765C1C15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {C2EBFD6E-57A0-4857-ACCB-998F9DB8583F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
C:\Users\dbube\Desktop\Driver Easy Professional\Driver Easy Professional\Crack\Patch.exe

EmptyTemp:
Hosts:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by dbube (11-04-2019 11:08:41) Run:2
Running from C:\Users\dbube\Desktop
Loaded Profiles: dbube (Available Profiles: dbube & Vlasta Petrová & SERVIS)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-4246267622-4105470206-3163352383-1001\...\MountPoints2: F - "F:\setup.exe"
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
Task: {6A2BF228-8D9E-472B-BC2A-925E765C1C15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {C2EBFD6E-57A0-4857-ACCB-998F9DB8583F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
C:\Users\dbube\Desktop\Driver Easy Professional\Driver Easy Professional\Crack\Patch.exe

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-4246267622-4105470206-3163352383-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\CLSID\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6A2BF228-8D9E-472B-BC2A-925E765C1C15}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A2BF228-8D9E-472B-BC2A-925E765C1C15}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C2EBFD6E-57A0-4857-ACCB-998F9DB8583F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2EBFD6E-57A0-4857-ACCB-998F9DB8583F}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Users\dbube\Desktop\Driver Easy Professional\Driver Easy Professional\Crack\Patch.exe => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 166150041 B
Java, Flash, Steam htmlcache => 329398656 B
Windows/system/drivers => 6076809 B
Edge => 0 B
Chrome => 360492038 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 75646 B
NetworkService => 0 B
dbube => 153753331 B
Vlasta Petrová => 30607622 B
SERVIS => 0 B

RecycleBin => 0 B
EmptyTemp: => 1008.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 11:09:06 ====

Smazáno. Nastala nějaká změna?

Noo, je to snad lepší ale teď mám pocit, že to ani není diskem D jako spíše procesorem, ten teď skáče jak se mu zachce a při hraní her mám FPS záseky a dělá to právě asi procesor

Procesor je jaký? A RAM má jakou velikost?

Je fakt, že počítač je již staršího data a je možné, že procesor pomaličku šlape z posledních sil.

Existuje nějaká fajn aplikace, dle které bychom zjistili funkčnost mého procesoru?

To není vůbec špatné. Záleží na tom, jaké hry hrajete. Tohle jde ovšem už trochu mimo nás, herní fórum nejsme. Čtyřjádrový Intel na 3GHZ a 16GB RAM, by mělo bohatě stačit. My vám můžeme už jen doporučit defragmentaci disku, to ostatní by vám měli poradit na některém herním fóru. Jedino aplikací, kterou znám je Everest: https://www.stahuj.cz/utility_a_ostatni ... y/everest/ . Je to komplexní aplikace, která vám řekne vše o vašem PC. Stav procesoru ovšem neotestuje.

No, ty FPS záseky nejsou stálé, dělá to jen někdy a dělá to u her u kterých to nikdy dřív nedělalo, nejspíš HW problém..uvidíme, pomocí Vaší očisty se to docela zlepšilo tak uvidíme, každopádně děkuji za ochotu.

Vždy jste mi zde pomohli a vážím si toho. Děkuji

Rádo se stalo!