Logfile of random's system information tool 1.10 (written by random/random) Run by Administrator at 2017-08-11 11:38:34 Microsoft Windows 10 Home System drive C: has 8 GB (2%) free of 476 GB Total RAM: 8183 MB (63% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:38:38, on 11-8-2017 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.15063.0000) Boot mode: Normal Running processes: C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe C:\Program Files (x86)\Winstep\Nexus.exe C:\Program Files (x86)\Steam\Steam.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\SpotifyWebHelper.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe C:\Program Files\WinZip\WZUpdateNotifier.exe C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe C:\Program Files\trend micro\Administrator.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll O4 - HKLM\..\Run: [PlaysTV] "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [Autodesk Desktop App] "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [OneDrive] "C:\Users\Administrator.ROCH-PC.001\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [Nexus] C:\Program Files (x86)\Winstep\Nexus.exe autostart O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Administrator.ROCH-PC.001\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [vibranceGUI] "C:\Users\Administrator.ROCH-PC.001\Desktop\Games\vibrance.GUI.exe" -minimized O4 - HKCU\..\Run: [Spotify Web Helper] C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart O4 - HKCU\..\Run: [Spotify] C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAHConsole.exe O4 - Global Startup: Update-melder.lnk = C:\Program Files\WinZip\WZUpdateNotifier.exe O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe O8 - Extra context menu item: Download all links with IDM - D:\IDM Patch 6.25\IEGetAll.htm O8 - Extra context menu item: Download with IDM - D:\IDM Patch 6.25\IEExt.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Autodesk Desktop App Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: ASGT - Unknown owner - C:\Windows\syswow64\ASGT.exe O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: DTSAudioService - DTS - C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe O23 - Service: Plays.tv Update Service (PlaysService) (PlaysService) - Copyright (c) 2017 Plays.tv, LLC - C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Update service - Popcorn Time - C:\Program Files (x86)\Popcorn Time\Updater.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14228 bytes ======Listing Processes====== C:\WINDOWS\system32\lsass.exe c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay C:\WINDOWS\system32\svchost.exe -k DcomLaunch "fontdrvhost.exe" c:\windows\system32\svchost.exe -k rpcss c:\windows\system32\svchost.exe -k dcomlaunch -s LSM c:\windows\system32\svchost.exe -k networkservice -s TermService C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted c:\windows\system32\svchost.exe -k netsvcs -s Schedule "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a2afc523-321f-458d-8314-2d836a7d52e2 -SystemEventPortName:HostProcess-b9424078-fff3-4935-9219-f7ef84bbb107 -IoCancelEventPortName:HostProcess-72251592-0cb7-40b1-9f4b-c6070fb5aa92 -NonStateChangingEventPortName:HostProcess-8cd9655d-64f0-4129-be00-7db803829a82 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a81865e0-86d7-4401-ad70-0f06c069a2b1 -DeviceGroupId:WudfDefaultDevicePool c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s hidserv "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 c:\windows\system32\svchost.exe -k netsvcs -s Themes c:\windows\system32\svchost.exe -k netsvcs -s UserManager c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog c:\windows\system32\svchost.exe -k localservice -s EventSystem c:\windows\system32\svchost.exe -k localservice -s nsi c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc c:\windows\system32\svchost.exe -k netsvcs -s SENS c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder c:\windows\system32\svchost.exe -k localservice -s FontCache c:\windows\system32\svchost.exe -k netsvcs -s SessionEnv C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp c:\windows\system32\svchost.exe -k networkservice -s NlaSvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted c:\windows\system32\svchost.exe -k networkservice -s Dnscache C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection c:\windows\system32\svchost.exe -k localservice -s netprofm c:\windows\system32\svchost.exe -k appmodel -s StateRepository C:\WINDOWS\System32\spoolsv.exe c:\windows\system32\svchost.exe -k localservicenonetwork c:\windows\system32\svchost.exe -k networkservice -s CryptSvc C:\WINDOWS\System32\svchost.exe -k utcsvc c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService c:\windows\system32\svchost.exe -k netsvcs -s WpnService c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc C:\WINDOWS\system32\svchost.exe -k imgsvc c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc C:\WINDOWS\SysWOW64\PnkBstrA.exe "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe" c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost "C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe" "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" C:\Windows\syswow64\ASGT.exe "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin" "C:\Program Files (x86)\Winstep\WsxService" "C:\Program Files (x86)\Popcorn Time\Updater.exe" "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service dashost.exe {d09e6220-e0df-44ab-a1725d07dba460f5} c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent c:\windows\system32\svchost.exe -k localservice -s CDPSvc c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker C:\WINDOWS\system32\SearchIndexer.exe /Embedding c:\windows\system32\svchost.exe -k localservice -s LicenseManager c:\windows\system32\svchost.exe -k netsvcs -s Appinfo c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc c:\windows\system32\svchost.exe -k netsvcs -s lfsvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DsSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -s WdiSystemHost C:\WINDOWS\System32\WinLogon.exe -SpecialSession "dwm.exe" "fontdrvhost.exe" "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s NgcSvc "C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe" c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc sihost.exe c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} C:\WINDOWS\system32\WpcMon.exe "480" "492" C:\WINDOWS\Explorer.EXE "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca C:\Windows\System32\RuntimeBroker.exe -Embedding "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1" "C:\Program Files\Windows Defender\MSASCuiL.exe" "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORDTSUPTBT "C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun C:\WINDOWS\system32\SettingSyncHost.exe -Embedding "C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe" -ByGPUTweakII -12 273 "C:\Program Files (x86)\Winstep\Nexus.exe" autostart "C:\Program Files (x86)\Steam\Steam.exe" -silent C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F} "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\WINDOWS\TEMP\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\WINDOWS\TEMP\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=60.0.3112.90 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffacccc29c0,0x7ffacccc29d8,0x7ffacccc29e8 "C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\SpotifyWebHelper.exe" --autostart "C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized "C:\Program Files\WinZip\FAHWindow64.exe" register "C:\Program Files\WinZip\WZUpdateNotifier.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1404,17773173459862464938,17578058443266832887,131072 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,20,21,24,43,77 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8253 --gpu-driver-date=6-7-2017 --service-request-channel-token=F053A060214A34597CFBF140B2B05143 --mojo-platform-channel-handle=1420 --ignored=" --type=renderer " /prefetch:2 "C:\Program Files\WinZip\WzPreloader.exe" "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe" --approot=SOFTWARE\Autodesk --appAgent=/AUTODESKDESKTOPAPP/7.0.6.378/en-US/0001 --lang=en-US --cache-path="Autodesk\Autodesk Desktop App\BrowserCache" --peerPid=9260 c:\windows\system32\svchost.exe -k unistacksvcgroup C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 "--database=C:\WINDOWS\TEMP\Spotify\User Data\Crashpad" "--metrics-dir=C:\WINDOWS\TEMP\Spotify\User Data" --url=https://crashdump.spotify.com:443 --annotation=channel= --annotation=platform=win32 --annotation=product=spotify --annotation=version=1.0.60.492 --initial-client-data=0x578,0x57c,0x580,0x574,0x584,0x64018214,0x64018224,0x64018234 "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\acwebbrowser.exe" --type=gpu-process --channel="7744.0.1435369415\739605342" --no-sandbox --lang=en-US --log-severity=disable --peerpid=9260 --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8253 --lang=en-US --log-severity=disable --peerpid=9260 /prefetch:822062411 "C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-sandbox --disable-d3d11 --lang=en-US --log-file="C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.60.492 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,19,20,23,41,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x1380 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8253 --gpu-driver-date=6-7-2017 --lang=en-US --log-file="C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.60.492 --service-request-channel-token=B418E9F8208EBC3796990B3CF71534AC --mojo-platform-channel-handle=2072 /prefetch:2 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1404,17773173459862464938,17578058443266832887,131072 --service-pipe-token=0725CA0B79E751D1C6E36C86E6E55060 --lang=nl --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=0725CA0B79E751D1C6E36C86E6E55060 --renderer-client-id=11 --mojo-platform-channel-handle=4600 /prefetch:1 "C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --disable-pinch --no-sandbox --disable-databases --primordial-pipe-token=EBF76C74C94C83BAEA0D27F9EFA2FC27 --lang=en-US --lang=en-US --log-file="C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.60.492 --disable-spell-checking --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=EBF76C74C94C83BAEA0D27F9EFA2FC27 --renderer-client-id=3 --mojo-platform-channel-handle=2928 /prefetch:1 C:\WINDOWS\system32\svchost.exe -k netsvcs -s wlidsvc "C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" "-lang=nl_NL" "-cachedir=C:\Program Files (x86)\Steam/config/htmlcache" "-steampid=10308" "-buildid=1500335472" "-steamid=0" "-clientui=C:\Program Files (x86)\Steam\clientui" --disable-spell-checking --disable-out-of-process-pac --enable-blink-features=ResizeObserver --disable-smooth-scrolling --disable-gpu-compositing --disable-gpu --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService "C:\WINDOWS\system32\NOTEPAD.EXE" C:\rsit\info.txt "C:\WINDOWS\system32\NOTEPAD.EXE" C:\rsit\log.txt C:\WINDOWS\system32\svchost.exe -k netsvcs -s gpsvc "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /WatchService C:\WINDOWS\system32\wbem\wmiprvse.exe c:\windows\system32\svchost.exe -k netsvcs C:\Windows\System32\smartscreen.exe -Embedding C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s lmhosts taskhostw.exe "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update SCHEDULEDTASK displaylevel=False C:\WINDOWS\system32\compattelrunner.exe \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c "C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe" C:\Windows\System32\InstallAgent.exe -Embedding "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe" C:\Windows\System32\InstallAgentUserBroker.exe -Embedding C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:2SAZSUDR4EKS/nLa.1 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1404,17773173459862464938,17578058443266832887,131072 --service-pipe-token=2F8B4D60AB3C027D7A92891804009A45 --lang=nl --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --service-request-channel-token=2F8B4D60AB3C027D7A92891804009A45 --renderer-client-id=23 --mojo-platform-channel-handle=5280 /prefetch:1 c:\windows\system32\svchost.exe -k netsvcs -s BITS \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\system32\AUDIODG.EXE 0x5bc C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\GeneralTel.dll,RunGeneralTelemetry -cV 2SAZSUDR4EKS/nLa.1.3 -SendFullTelemetry -ThrottleUtc C:\WINDOWS\System32\svchost.exe -k smphost "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe16_ Global\UsGthrCtrlFltPipeMssGthrPipe16 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchFilterHost.exe" 0 692 696 704 8192 700 "D:\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\DLL-Files.Com Fixer_MONTHLY.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe scan C:\WINDOWS\tasks\DLL-Files.Com Fixer_Updates.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe -updatecheck =========Mozilla firefox========= ProfilePath - C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Mozilla\Firefox\Profiles\mmecyg0d.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 26.0.0.151 Plugin "Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.141.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.141.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Microsoft Lync Plug-in for Firefox "Path"=C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision] "Description"=NVIDIA stereo images plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming] "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 26.0.0.151 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06 210112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-08-05 3131072] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-07-06 149704] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-26 473664] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-08-05 2106048] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-26 187968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800] "RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24 1402624] "XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "OneDrive"=C:\Users\Administrator.ROCH-PC.001\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-08-07 1536208] "Nexus"=C:\Program Files (x86)\Winstep\Nexus.exe [2017-01-27 13910656] "Steam"=C:\Program Files (x86)\Steam\steam.exe [2017-07-18 3062560] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-06-27 27784672] "Akamai NetSession Interface"=C:\Users\Administrator.ROCH-PC.001\AppData\Local\Akamai\netsession_win.exe [2017-01-03 4490200] "vibranceGUI"=C:\Users\Administrator.ROCH-PC.001\Desktop\Games\vibrance.GUI.exe [2016-07-16 1072128] "Spotify Web Helper"=C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2017-08-03 1580144] "Spotify"=C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify\Spotify.exe [2017-08-03 15866480] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "PlaysTV"=C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [2017-06-29 51416] "amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824] "Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2014-09-11 2087264] "Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2017-06-04 2406496] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720] "Autodesk Desktop App"=C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [2017-06-15 704424] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-07-12 587288] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup FAH.lnk - C:\Program Files\WinZip\FAHConsole.exe Update-melder.lnk - C:\Program Files\WinZip\WZUpdateNotifier.exe WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DSCAutomationHostEnabled"=2 "FilterAdministratorToken"=1 "SafeModeBlockNonAdmins"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=iyuv_32.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "vidc.mjpg"=bdmjpeg64.dll "vidc.mpeg"=bdmpegv64.dll "msacm.bdmpeg"=bdmpega64.acm ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2017-08-10 18:28:25 ----D---- C:\Program Files\trend micro 2017-08-10 18:28:22 ----D---- C:\rsit 2017-08-10 17:25:25 ----D---- C:\Storage 2017-08-10 12:44:48 ----HD---- C:\OneDriveTemp 2017-08-09 15:40:08 ----D---- C:\ProgramData\Adobe 2017-08-09 14:47:49 ----A---- C:\WINDOWS\system32\tquery.dll 2017-08-09 14:47:48 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe 2017-08-09 14:47:48 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2017-08-09 14:47:48 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll 2017-08-09 14:47:48 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2017-08-09 14:47:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll 2017-08-09 14:47:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll 2017-08-09 14:47:47 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys 2017-08-09 14:47:47 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll 2017-08-09 14:47:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll 2017-08-09 14:47:46 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msxbde40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\mstext40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msrepl40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\mspbde40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msltus40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msjtes40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msjetoledb40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll 2017-08-09 14:47:45 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll 2017-08-09 14:47:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll 2017-08-09 14:47:44 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll 2017-08-09 14:47:44 ----A---- C:\WINDOWS\SYSWOW64\msjter40.dll 2017-08-09 14:47:44 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\wer.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\mswdat10.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll 2017-08-09 14:47:43 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\werui.dll 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\tokenbinding.dll 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll 2017-08-09 14:47:42 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE 2017-08-09 14:47:41 ----A---- C:\WINDOWS\system32\diagtrack.dll 2017-08-09 14:47:40 ----A---- C:\WINDOWS\system32\WWAHost.exe 2017-08-09 14:47:40 ----A---- C:\WINDOWS\system32\drivers\tdx.sys 2017-08-09 14:47:38 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll 2017-08-09 14:47:38 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll 2017-08-09 14:47:38 ----A---- C:\WINDOWS\system32\ieproxy.dll 2017-08-09 14:47:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2017-08-09 14:47:36 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2017-08-09 14:47:36 ----A---- C:\WINDOWS\system32\Chakradiag.dll 2017-08-09 14:47:35 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll 2017-08-09 14:47:35 ----A---- C:\WINDOWS\system32\jscript9diag.dll 2017-08-09 14:47:35 ----A---- C:\WINDOWS\system32\jscript9.dll 2017-08-09 14:47:34 ----A---- C:\WINDOWS\system32\edgehtml.dll 2017-08-09 14:47:33 ----A---- C:\WINDOWS\system32\mshtml.dll 2017-08-09 14:47:33 ----A---- C:\WINDOWS\system32\Chakra.dll 2017-08-09 14:47:30 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll 2017-08-09 14:47:29 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2017-08-09 14:47:29 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2017-08-09 14:47:29 ----A---- C:\WINDOWS\system32\drivers\clfs.sys 2017-08-09 14:47:28 ----A---- C:\WINDOWS\system32\ieframe.dll 2017-08-09 14:47:28 ----A---- C:\WINDOWS\system32\browserbroker.dll 2017-08-09 14:47:25 ----A---- C:\WINDOWS\system32\wermgr.exe 2017-08-09 14:47:25 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe 2017-08-09 14:47:25 ----A---- C:\WINDOWS\system32\wer.dll 2017-08-09 14:47:25 ----A---- C:\WINDOWS\system32\Faultrep.dll 2017-08-09 14:47:24 ----A---- C:\WINDOWS\system32\wwansvc.dll 2017-08-09 14:47:24 ----A---- C:\WINDOWS\system32\wersvc.dll 2017-08-09 14:47:24 ----A---- C:\WINDOWS\system32\WerFault.exe 2017-08-09 14:47:24 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys 2017-08-09 14:47:23 ----A---- C:\WINDOWS\system32\win32kbase.sys 2017-08-09 14:47:23 ----A---- C:\WINDOWS\system32\TokenBroker.dll 2017-08-09 14:47:23 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-08-09 14:47:23 ----A---- C:\WINDOWS\system32\msIso.dll 2017-08-09 14:47:23 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys 2017-08-09 14:47:22 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-08-09 14:47:22 ----A---- C:\WINDOWS\system32\win32kfull.sys 2017-08-09 14:47:22 ----A---- C:\WINDOWS\system32\urlmon.dll 2017-08-09 14:47:21 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-08-09 14:47:20 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-08-09 14:47:19 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-08-09 14:47:16 ----A---- C:\WINDOWS\system32\iertutil.dll 2017-08-09 14:47:13 ----A---- C:\WINDOWS\system32\policymanager.dll 2017-08-09 14:47:13 ----A---- C:\WINDOWS\system32\msv1_0.dll 2017-08-09 14:47:13 ----A---- C:\WINDOWS\system32\enterprisecsps.dll 2017-08-09 14:47:12 ----A---- C:\WINDOWS\system32\scksp.dll 2017-08-09 14:47:11 ----A---- C:\WINDOWS\system32\werconcpl.dll 2017-08-09 14:47:11 ----A---- C:\WINDOWS\system32\basecsp.dll 2017-08-09 14:47:10 ----A---- C:\WINDOWS\system32\ncryptprov.dll 2017-08-09 14:47:09 ----A---- C:\WINDOWS\system32\werui.dll 2017-08-09 14:47:09 ----A---- C:\WINDOWS\system32\srvsvc.dll 2017-08-09 14:47:09 ----A---- C:\WINDOWS\system32\profsvcext.dll 2017-08-09 14:47:09 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll 2017-08-09 14:47:09 ----A---- C:\WINDOWS\system32\fdeploy.dll 2017-08-09 14:47:08 ----A---- C:\WINDOWS\system32\wercplsupport.dll 2017-08-09 14:47:08 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\tokenbinding.dll 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\sscore.dll 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\dmenterprisediagnostics.dll 2017-08-09 14:47:07 ----A---- C:\WINDOWS\system32\coredpus.dll 2017-08-09 14:47:06 ----A---- C:\WINDOWS\system32\wsqmcons.exe 2017-08-09 14:47:06 ----A---- C:\WINDOWS\system32\mdmregistration.dll 2017-08-09 14:47:06 ----A---- C:\WINDOWS\system32\DWWIN.EXE 2017-08-09 14:47:06 ----A---- C:\WINDOWS\system32\dmenrollengine.dll 2017-08-09 14:47:06 ----A---- C:\WINDOWS\system32\configmanager2.dll 2017-08-09 14:47:05 ----A---- C:\WINDOWS\system32\dmcsps.dll 2017-08-09 14:47:05 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe 2017-08-07 14:11:24 ----D---- C:\ProgramData\Microsoft OneDrive 2017-08-07 14:05:51 ----SHD---- C:\Recovery 2017-08-07 14:01:12 ----SHD---- C:\ProgramData\Application Data 2017-08-07 14:01:01 ----D---- C:\Windows.old 2017-08-07 13:59:04 ----A---- C:\WINDOWS\SYSWOW64\IpNatHlpClient.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsDesktopEngine.exe 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\d3d12warp.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\d2d1debug3.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\cmintegrator.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\workfolderssvc.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\wmpps.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll 2017-08-07 13:59:03 ----A---- C:\WINDOWS\system32\d2d1debug3.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\shsvcs.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\shlwapi.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll 2017-08-07 13:59:02 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\msacm32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\XblAuthManager.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wuuhext.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wudriver.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wuaueng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wuapi.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\winsrv.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wininit.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.UI.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\windows.storage.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\wbiosrvc.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\VCardParser.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\untfs.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\UIRibbon.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\twinui.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\TpmTasks.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\TileDataRepository.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\TextInputFramework.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\storewuauth.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\spbcd.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\SIHClient.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\shsvcs.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\shlwapi.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\shell32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\SettingsHandlers_Display.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\setbcdlocale.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\services.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\reseteng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ReAgent.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\rastlsext.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\rastls.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\rasapi32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\qasf.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\psmsrv.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\PCPKsp.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ole32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\officecsp.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ofdeploy.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\netlogon.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\msacm32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\MPSSVC.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\lpasvc.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\LogonController.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\KernelBase.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\IpNatHlpClient.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\InstallAgent.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\InputService.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\hal.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\GamePanel.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\FrameServer.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\FlightSettings.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\efscore.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dxgi.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dwmredir.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dui70.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\bridge.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\drivers\acpi.sys 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dosvc.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dmcmnutils.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\dbgeng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\CoreMessaging.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\comdlg32.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\cmintegrator.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ClipSVC.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\BootMenuUX.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\BluetoothApis.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\bisrv.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\BingMaps.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\bcdedit.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\bcdboot.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\bcd.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\autofmt.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\autoconv.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\autochk.exe 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\audiosrv.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AudioSes.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AudioEng.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\AppReadiness.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\ActivationManager.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\aadtb.dll 2017-08-07 13:58:50 ----A---- C:\WINDOWS\system32\aadcloudap.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsRemoteEngine.exe 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsExperiment.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsCapture.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARPDebug.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARP12Debug.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXToolsReporting.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXToolsOfflineAnalysis.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXToolsMonitor.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXGIDebug.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXCpl.exe 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXCaptureReplay.dll 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\DXCap.exe 2017-08-07 13:51:07 ----A---- C:\WINDOWS\SYSWOW64\d3d11_3SDKLayers.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsProxyStub.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\SYSWOW64\perf_gputiming.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\SYSWOW64\DxToolsReportGenerator.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VsGraphicsProxyStub.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VsGraphicsExperiment.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VsGraphicsCapture.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VSD3DWARPDebug.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\VSD3DWARP12Debug.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\perf_gputiming.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXToolsReporting.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DxToolsReportGenerator.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXToolsMonitor.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXGIDebug.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXCpl.exe 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXCaptureReplay.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\DXCap.exe 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\d3d12warp.dll 2017-08-07 13:51:06 ----A---- C:\WINDOWS\system32\d3d11_3SDKLayers.dll 2017-08-07 13:49:50 ----D---- C:\WINDOWS\system32\Microsoft 2017-08-07 13:49:50 ----D---- C:\WINDOWS\ServiceProfiles 2017-08-07 13:46:22 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer 2017-08-07 13:46:22 ----D---- C:\Program Files\Reference Assemblies 2017-08-07 13:46:22 ----D---- C:\Program Files\MSBuild 2017-08-07 13:46:22 ----D---- C:\Program Files (x86)\Reference Assemblies 2017-08-07 13:46:22 ----AD---- C:\Program Files (x86)\MSBuild 2017-08-07 13:45:17 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe 2017-08-07 13:45:17 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll 2017-08-07 13:45:17 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-08-07 13:45:13 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe 2017-08-07 13:45:13 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-08-07 13:45:13 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-08-07 13:40:09 ----ASH---- C:\hiberfil.sys 2017-08-07 13:18:38 ----D---- C:\ProgramData\USOShared 2017-08-07 13:14:09 ----SD---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Microsoft 2017-08-07 13:12:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2017-08-07 13:12:35 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nvsvcr.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nvsvc64.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nvshext.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nvmctray.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nvcpl.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll 2017-08-07 13:12:08 ----A---- C:\WINDOWS\system32\nv3dappshext.dll 2017-08-07 13:11:57 ----D---- C:\ProgramData\NVIDIA 2017-08-07 13:11:57 ----A---- C:\WINDOWS\NvContainerRecovery.bat 2017-08-07 13:11:53 ----HD---- C:\Program Files (x86)\Uninstall Information 2017-08-07 13:11:47 ----D---- C:\ProgramData\NVIDIA Corporation 2017-08-07 13:11:36 ----D---- C:\Program Files\NVIDIA Corporation 2017-08-07 13:11:36 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2017-08-07 13:11:11 ----D---- C:\WINDOWS\system32\DAX2 2017-08-07 13:10:51 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll 2017-08-07 13:10:44 ----D---- C:\Program Files\Realtek 2017-08-07 13:10:42 ----D---- C:\WINDOWS\SYSWOW64\RTCOM 2017-08-07 13:09:13 ----AS---- C:\WINDOWS\bootstat.dat 2017-08-07 13:07:54 ----D---- C:\WINDOWS\Prefetch 2017-08-07 13:07:42 ----D---- C:\WINDOWS\system32\SleepStudy 2017-08-07 13:07:36 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT 2017-08-04 18:28:33 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Blender Foundation 2017-08-03 19:16:55 ----D---- C:\ProgramData\Reprise 2017-07-29 18:25:04 ----D---- C:\Program Files (x86)\Blizzard App 2017-07-29 18:24:44 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Battle.net 2017-07-28 16:47:46 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\NuGet 2017-07-27 16:19:37 ----DC---- C:\WINDOWS\Panther 2017-07-26 17:51:12 ----D---- C:\WINDOWS\system32\drivers\NSSx64 2017-07-26 17:51:12 ----D---- C:\ProgramData\Norton 2017-07-26 17:51:12 ----AD---- C:\Program Files (x86)\Norton Security Scan 2017-07-26 17:51:07 ----D---- C:\Program Files (x86)\NortonInstaller 2017-07-26 17:51:06 ----D---- C:\ProgramData\NortonInstaller 2017-07-23 20:40:33 ----D---- C:\Program Files (x86)\Zircon Network 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\vxblock.dll 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\pxwave.dll 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\pxmas.dll 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\pxhpinst.exe 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\pxdrv.dll 2017-07-22 19:26:55 ----A---- C:\WINDOWS\SYSWOW64\px.dll 2017-07-22 19:26:53 ----A---- C:\WINDOWS\SYSWOW64\msxml4r.dll 2017-07-22 19:26:53 ----A---- C:\WINDOWS\SYSWOW64\msxml4.dll 2017-07-12 18:10:53 ----D---- C:\ProgramData\boost_interprocess 2017-07-12 18:10:48 ----D---- C:\ProgramData\FLEXnet 2017-07-12 17:55:56 ----D---- C:\Program Files\Autodesk 2017-07-12 17:55:11 ----D---- C:\Program Files (x86)\Autodesk 2017-07-12 17:45:35 ----D---- C:\solidangle 2017-07-12 16:58:15 ----D---- C:\Program Files\Common Files\Macrovision Shared 2017-07-12 16:58:05 ----AD---- C:\Program Files\Common Files\Autodesk Shared 2017-07-12 16:55:34 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Autodesk 2017-07-12 16:55:33 ----AD---- C:\ProgramData\Autodesk 2017-07-12 16:36:03 ----D---- C:\Autodesk 2017-07-12 15:41:26 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Unreal Engine ======List of files/folders modified in the last 1 month====== 2017-08-11 11:38:37 ----D---- C:\WINDOWS\Temp 2017-08-11 11:35:35 ----D---- C:\WINDOWS\system32\sru 2017-08-10 18:28:25 ----RD---- C:\Program Files 2017-08-10 18:28:13 ----D---- C:\Program Files (x86)\Steam 2017-08-10 17:31:09 ----D---- C:\WINDOWS\rescache 2017-08-10 16:03:49 ----RD---- C:\WINDOWS\Microsoft.NET 2017-08-10 15:57:02 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\HandBrake 2017-08-10 15:17:49 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Skype 2017-08-10 15:17:04 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Spotify 2017-08-10 15:16:53 ----D---- C:\WINDOWS\System32 2017-08-10 15:15:02 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\PlaysTV 2017-08-10 14:57:23 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\audacity 2017-08-10 14:26:28 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Adobe 2017-08-10 13:37:16 ----D---- C:\WINDOWS\system32\config 2017-08-10 12:42:35 ----D---- C:\WINDOWS\system32\AppLocker 2017-08-10 12:41:18 ----D---- C:\WINDOWS\SysWOW64 2017-08-10 12:41:17 ----D---- C:\WINDOWS\Tasks 2017-08-10 12:41:00 ----D---- C:\WINDOWS\system32\Macromed 2017-08-10 12:40:51 ----D---- C:\WINDOWS\SYSWOW64\Macromed 2017-08-10 12:40:21 ----D---- C:\WINDOWS\WinSxS 2017-08-10 12:39:38 ----D---- C:\WINDOWS\system32\DriverStore 2017-08-10 12:37:13 ----D---- C:\WINDOWS\system32\catroot2 2017-08-10 12:36:44 ----D---- C:\WINDOWS\system32\en-US 2017-08-10 12:36:44 ----D---- C:\WINDOWS\system32\drivers 2017-08-10 12:36:43 ----D---- C:\WINDOWS\AppPatch 2017-08-10 12:36:41 ----D---- C:\WINDOWS\INF 2017-08-10 11:53:01 ----D---- C:\WINDOWS\AppReadiness 2017-08-10 11:53:00 ----HD---- C:\Program Files\WindowsApps 2017-08-10 11:45:43 ----RD---- C:\WINDOWS\assembly 2017-08-09 17:44:42 ----D---- C:\WINDOWS\Logs 2017-08-09 17:44:09 ----D---- C:\WINDOWS\LiveKernelReports 2017-08-09 17:38:26 ----RD---- C:\Program Files (x86) 2017-08-09 16:42:17 ----HD---- C:\ProgramData 2017-08-09 15:48:28 ----SHD---- C:\System Volume Information 2017-08-09 14:57:39 ----D---- C:\WINDOWS\CbsTemp 2017-08-09 14:54:38 ----D---- C:\WINDOWS\system32\MRT 2017-08-09 14:51:19 ----D---- C:\WINDOWS\debug 2017-08-09 14:51:07 ----AC---- C:\WINDOWS\system32\MRT.exe 2017-08-09 14:49:06 ----D---- C:\WINDOWS\system32\restore 2017-08-08 13:48:06 ----D---- C:\WINDOWS\system32\WDI 2017-08-08 11:31:48 ----D---- C:\WINDOWS\appcompat 2017-08-07 19:55:13 ----D---- C:\ProgramData\Unity 2017-08-07 19:43:53 ----D---- C:\WINDOWS\system32\drivers\UMDF 2017-08-07 14:38:00 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\.minecraft 2017-08-07 14:15:57 ----SD---- C:\ProgramData\Microsoft 2017-08-07 14:08:43 ----RD---- C:\WINDOWS\ImmersiveControlPanel 2017-08-07 14:01:13 ----D---- C:\WINDOWS\Setup 2017-08-07 14:01:12 ----D---- C:\Program Files\Windows NT 2017-08-07 14:00:27 ----D---- C:\WINDOWS\system32\WinBioDatabase 2017-08-07 14:00:25 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata 2017-08-07 14:00:25 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2017-08-07 14:00:25 ----D---- C:\WINDOWS\system32\WinMetadata 2017-08-07 14:00:25 ----D---- C:\WINDOWS\system32\WinBioPlugIns 2017-08-07 14:00:25 ----D---- C:\WINDOWS\system32\oobe 2017-08-07 14:00:25 ----D---- C:\WINDOWS\system32\nl-NL 2017-08-07 14:00:25 ----D---- C:\WINDOWS\ShellExperiences 2017-08-07 14:00:25 ----D---- C:\Program Files\Windows Photo Viewer 2017-08-07 14:00:25 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2017-08-07 14:00:12 ----D---- C:\WINDOWS\Registration 2017-08-07 14:00:11 ----D---- C:\WINDOWS\SoftwareDistribution 2017-08-07 13:56:56 ----D---- C:\Windows 2017-08-07 13:56:24 ----RSD---- C:\WINDOWS\Fonts 2017-08-07 13:56:24 ----D---- C:\WINDOWS\system32\Tasks_Migrated 2017-08-07 13:52:03 ----D---- C:\WINDOWS\HoloShell 2017-08-07 13:51:52 ----D---- C:\WINDOWS\system32\LogFiles 2017-08-07 13:51:23 ----D---- C:\WINDOWS\system32\Tasks 2017-08-07 13:49:58 ----D---- C:\WINDOWS\system32\wbem 2017-08-07 13:49:56 ----D---- C:\WINDOWS\system32\drivers\etc 2017-08-07 13:46:22 ----D---- C:\WINDOWS\SYSWOW64\MUI 2017-08-07 13:46:22 ----D---- C:\WINDOWS\system32\MUI 2017-08-07 13:39:05 ----D---- C:\WINDOWS\SYSWOW64\1033 2017-08-07 13:39:05 ----D---- C:\WINDOWS\system32\UNP 2017-08-07 13:39:00 ----D---- C:\WINDOWS\system32\1033 2017-08-07 13:38:59 ----HDC---- C:\WINDOWS\Installer 2017-08-07 13:38:59 ----D---- C:\WINDOWS\nl 2017-08-07 13:38:59 ----D---- C:\WINDOWS\ModemLogs 2017-08-07 13:38:56 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft 2017-08-07 13:24:30 ----D---- C:\WINDOWS\SYSWOW64\xlive 2017-08-07 13:24:28 ----D---- C:\WINDOWS\SYSWOW64\migration 2017-08-07 13:24:27 ----SHD---- C:\WINDOWS\SYSWOW64\AI_RecycleBin 2017-08-07 13:24:27 ----D---- C:\WINDOWS\SYSWOW64\en-US 2017-08-07 13:24:27 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF 2017-08-07 13:24:23 ----D---- C:\WINDOWS\system32\zh-HK 2017-08-07 13:24:22 ----D---- C:\WINDOWS\system32\spool 2017-08-07 13:24:18 ----D---- C:\WINDOWS\system32\NDF 2017-08-07 13:22:53 ----D---- C:\WINDOWS\OCR 2017-08-07 13:22:32 ----RD---- C:\Users 2017-08-07 13:22:08 ----D---- C:\Program Files (x86)\Microsoft.NET 2017-08-07 13:22:07 ----D---- C:\Program Files (x86)\Common Files 2017-08-07 13:21:55 ----D---- C:\Program Files\Common Files 2017-08-07 13:21:55 ----AD---- C:\Program Files\IIS 2017-08-07 13:21:54 ----AD---- C:\Program Files\Common Files\microsoft shared 2017-08-07 13:18:38 ----D---- C:\ProgramData\USOPrivate 2017-08-07 13:17:30 ----HD---- C:\WINDOWS\system32\GroupPolicyUsers 2017-08-07 13:17:30 ----HD---- C:\WINDOWS\system32\GroupPolicy 2017-08-07 13:17:30 ----D---- C:\WINDOWS\system32\CodeIntegrity 2017-08-07 13:17:22 ----D---- C:\WINDOWS\system32\Recovery 2017-08-07 13:12:20 ----D---- C:\WINDOWS\system32\Sysprep 2017-08-07 13:12:16 ----D---- C:\TEMP 2017-08-07 13:12:07 ----D---- C:\WINDOWS\Help 2017-08-07 12:25:53 ----RASH---- C:\BOOTSECT.BAK 2017-08-07 12:25:43 ----SHD---- C:\Boot 2017-08-07 12:19:32 ----HD---- C:\$WINDOWS.~BT 2017-08-05 20:08:19 ----AD---- C:\Program Files (x86)\Microsoft Office 2017-08-03 18:27:31 ----D---- C:\ProgramData\Package Cache 2017-07-31 17:15:09 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2017-07-27 19:41:01 ----D---- C:\ProgramData\Skype 2017-07-27 15:43:20 ----D---- C:\ProgramData\Oracle 2017-07-26 17:50:40 ----D---- C:\Program Files (x86)\Java 2017-07-26 17:50:05 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll 2017-07-22 19:58:07 ----AD---- C:\Program Files\Adobe 2017-07-22 19:58:06 ----D---- C:\Program Files\Common Files\Adobe 2017-07-22 19:35:43 ----AD---- C:\Program Files (x86)\Adobe 2017-07-13 17:53:51 ----D---- C:\Users\Administrator.ROCH-PC.001\AppData\Roaming\Ableton 2017-07-12 16:41:05 ----D---- C:\WINDOWS\system32\sr-Latn-CS ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568] R0 mv91xx;mv91xx; C:\WINDOWS\System32\drivers\mv91xx.sys [2009-12-25 297512] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2017-07-26 508032] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192] R1 MpKsla3070ce1;MpKsla3070ce1; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3481C165-7F40-4DCE-84B6-C6DD140397C0}\MpKsla3070ce1.sys [2017-08-10 44928] R1 MpKslf3f5906c;MpKslf3f5906c; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2F5ED478-EE84-46E4-840E-47C65CCAF683}\MpKslf3f5906c.sys [2017-08-10 44928] R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688] R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-03-18 79872] R3 BazisVirtualCDBus;@oem0.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-09-28 172376] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320] R3 MTsensor;@oem9.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2013-05-17 17280] R3 NVHDA;@oem1.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2017-06-08 218712] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_2d81f3535ced17c6\nvlddmkm.sys [2017-06-09 14461344] R3 nvvad_WaveExtensible;@oem40.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2017-06-08 48064] R3 SensorsSimulatorDriver;@oem7.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [2017-03-18 220672] R4 IOMap;IOMap; \??\C:\WINDOWS\system32\drivers\IOMap64.sys [2014-10-23 24824] S0 amdkmafd;@oem51.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2013-03-14 21600] S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808] S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328] S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416] S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784] S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848] S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040] S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2017-03-18 36760] S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288] S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480] S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-03-18 39424] S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880] S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032] S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224] S3 dg_ssudbus;@oem8.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2017-05-18 131984] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504] S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104] S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648] S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280] S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408] S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656] S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504] S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376] S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240] S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864] S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320] S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408] S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960] S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\WINDOWS\System32\drivers\nusb3hub.sys [2010-04-27 83080] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\WINDOWS\System32\drivers\nusb3xhc.sys [2010-04-27 184968] S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896] S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376] S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864] S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128] S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352] S3 ssudmdm;@oem45.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2017-05-18 166288] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdAppMgrSvc;Autodesk Desktop App Service; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [2017-06-15 1353208] R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2017-06-04 814688] R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-05-18 2246256] R2 ASGT;ASGT; C:\Windows\syswow64\ASGT.exe [2015-05-29 48640] R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 CDPUserSvc_15aa0c5;Gebruikerservice voor Connected Devices Platform_15aa0c5; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 ClickToRunSvc;Klik-en-klaar-service van Microsoft Office; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-07-18 4412104] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R2 DTSAudioService;DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [2015-06-24 218768] R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-06-08 462968] R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-06-08 449984] R2 OneSyncSvc_15aa0c5;Host synchroniseren_15aa0c5; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 PlaysService;Plays.tv Update Service (PlaysService); C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2017-06-29 55000] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2017-03-04 76888] R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-11 336320] R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 PimIndexMaintenanceSvc_15aa0c5;Contact Data_15aa0c5; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-07-18 1608480] R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-21 154440] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-06-01 317400] S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2017-07-22 72704] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-10 272384] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-03-18 52920] S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-04-15 1530376] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 DevicesFlowUserSvc_15aa0c5;DevicesFlow_15aa0c5; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2016-05-05 240416] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2017-07-12 1591264] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696] S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-21 154440] S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 MessagingService_15aa0c5;MessagingService_15aa0c5; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-11-24 146888] S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-08 495040] S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-08 495040] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-07-18 213704] S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904] S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2017-03-18 302592] S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] -----------------EOF-----------------