Chyba 42006 Avast

Zpráva

LukasDr · #1 Příspěvek od **LukasDr** » 22 led 2018 16:07

Ahoj,

Avast mi už delší dobu hází tyto dvě chyby
Chyba: soubor není přístupný (je offline). (42006)
Chyba: archiv je chráněn heslem. (42056)

Jelikož mi dost často PC jede na plný obrátky, aniž bych měl spuštěného něco jiného než Chrome, raději bych se přesvědčil, že tam nic nemám. Našel jsem podobný threattady na fóru, tak bych se chtěl zeptat, jestli mám postupovat stejně.

Díky moc!

Logfile of random's system information tool 1.10 (written by random/random)
Run by Worker at 2018-01-22 16:03:33
Microsoft Windows 10 Home
System drive C: has 157 GB (68%) free of 230 GB
Total RAM: 8066 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:03:51, on 22/01/2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\ELAN\HP Pen Control\HP Pen Control.exe
C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Pub\PubMonitor.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Worker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp17win10.msn.com/?pc=HCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - (no file)
O4 - HKLM\..\Run: [HPRadioMgr] C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
O4 - HKLM\..\Run: [EzClick] C:\Program Files (x86)\ELAN\HP Pen Control\HP Pen Control.exe -i
O4 - HKCU\..\Run: [iCloudServices] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Send to OneNote.lnk = C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem9.inf,%ServiceDisplayName%;Intel(R) Dynamic Platform and Thermal Framework service (esifsvc) - Unknown owner - C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem31.inf,%hpservice_desc%;HP 3DDG Service (hp3ddgsrv) - Unknown owner - C:\WINDOWS\system32\HP3DDGService.exe (file missing)
O23 - Service: HP JumpStart Bridge (HPJumpStartBridge) - HP Inc. - c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
O23 - Service: HP CASL Framework Service (hpqcaslwmiex) - HP - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem54.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) TPM Provisioning Service - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 13557 bytes

======Listing Processes======

c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c208d354-2d50-41c0-81e8-97802e6bb4ae -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d5cc60e2-0202-4cb6-ad7c-359ad1f2d698 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d8d89b36-918f-47fd-b8ab-7a06742dd4d7 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-50e9b482-6e13-4146-97ca-486074cca2be -LifetimeId:9393530b-f99a-43e1-8537-aacf6a1b1c4c -DeviceGroupId:
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
winlogon.exe
"fontdrvhost.exe"
"dwm.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\HP3DDGService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection

C:\WINDOWS\system32\WLANExt.exe 2494675904640
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe
C:\WINDOWS\system32\ibtsiva
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files\Elantech\ETDService.exe"

c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHDCPSvc.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
dashost.exe {7e8536ba-2ba3-4cb7-97d93e3aadeac05d}
C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHeciSvc.exe
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s FDResPub
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s HomeGroupProvider
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\WINDOWS\system32\Intel\DPTF\dptf_helper.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Elantech\ETDTouch.exe"
"C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\igfxEM.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"ctfmon.exe"
/QuitInfo:00000000000001E4;00000000000001F0;
/loadhooks /Parent:0000000000002230
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe"
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
AvastUI.exe /nogui
"C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe"
"C:\Program Files (x86)\ELAN\HP Pen Control\HP Pen Control.exe" -i
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\HP\Shared\hpqwmiex.exe"
"C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Worker\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Worker\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Worker\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=63.0.3239.132 --initial-client-data=0x1d8,0x1dc,0x1e0,0x1d4,0x1e4,0x7ffcc5155720,0x7ffcc5155760,0x7ffcc5155738
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=2592 --on-initialized-event-handle=652 --parent-handle=656 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --gpu-vendor-id=0x8086 --gpu-device-id=0x5917 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=22.20.16.4691 --gpu-driver-date=6-2-2017 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x134d --service-request-channel-token=8288F35394A5E3713C8D0F8AA7E44C60 --mojo-platform-channel-handle=1548 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=A362416AF7C80F12FC6ED7C7DD85C829 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=A362416AF7C80F12FC6ED7C7DD85C829 --renderer-client-id=4 --mojo-platform-channel-handle=3476 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=C7D9C9AF6D58ECED4663A2D572C8139B --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=C7D9C9AF6D58ECED4663A2D572C8139B --renderer-client-id=5 --mojo-platform-channel-handle=3960 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=AD45DD25CA2BE6FC2072F1107EB936CD --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=AD45DD25CA2BE6FC2072F1107EB936CD --renderer-client-id=6 --mojo-platform-channel-handle=3964 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=797BC6275D7DD1174552C4FA4B62BE6E --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=797BC6275D7DD1174552C4FA4B62BE6E --renderer-client-id=13 --mojo-platform-channel-handle=6900 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=94576A3F9AECC508C9453724058A1151 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=94576A3F9AECC508C9453724058A1151 --renderer-client-id=14 --mojo-platform-channel-handle=7124 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=4D3C7C67E9A05AF06CBF82FA6616FA27 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=4D3C7C67E9A05AF06CBF82FA6616FA27 --renderer-client-id=19 --mojo-platform-channel-handle=1232 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=F6B96C9F0170784F79C6E3D343D19340 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=F6B96C9F0170784F79C6E3D343D19340 --renderer-client-id=21 --mojo-platform-channel-handle=7732 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=FCDB1754010E3728F33C24B6E5C8C90A --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=FCDB1754010E3728F33C24B6E5C8C90A --renderer-client-id=27 --mojo-platform-channel-handle=6908 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
"C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Pub\PubMonitor.exe" /DB
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11712.1001.13.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1712.3351.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s QWAVE
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=ECCE27D03BD873F2CFD82E9E6A3B0282 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=ECCE27D03BD873F2CFD82E9E6A3B0282 --renderer-client-id=98 --mojo-platform-channel-handle=9400 /prefetch:1
taskhostw.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=95DA0A3F000B2754A3262EA383925311 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=95DA0A3F000B2754A3262EA383925311 --renderer-client-id=160 --mojo-platform-channel-handle=15248 /prefetch:1
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Eaphost
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}
"C:\WINDOWS\system32\SnippingTool.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=5C80E8497333E0C5C03015437180DAA5 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=5C80E8497333E0C5C03015437180DAA5 --renderer-client-id=420 --mojo-platform-channel-handle=13516 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,1947913263751463468,2467188542077475005,131072 --service-pipe-token=7A01C9D8D906EB6446A2541D81A1DBA5 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --service-request-channel-token=7A01C9D8D906EB6446A2541D81A1DBA5 --renderer-client-id=446 --mojo-platform-channel-handle=8864 /prefetch:1
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" --type=renderer --disable-gpu-compositing --disable-pinch --force-device-scale-factor=1.25 --no-sandbox --primordial-pipe-token=CA44E70009768B12C1DA6625164D839F --lang=en-US --lang=en-US --log-file="C:\Users\Worker\AppData\Roaming\AVAST Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.3.2987.1601 Safari/537.36 Avastium (17.9.2322)" --proxy-auto-detect --disable-webaudio --mute-audio --force-wave-audio --disable-gpu --disable-software-rasterizer --no-sandbox --disable-webgl --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --allow-file-access-from-files=1 --force-device-scale-factor=1.25 --pack_loading_disabled=1 --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=CA44E70009768B12C1DA6625164D839F --renderer-client-id=13 --mojo-platform-channel-handle=5288 /prefetch:1
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe41_ Global\UsGthrCtrlFltPipeMssGthrPipe41 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 720 724 732 8192 728
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
"C:\Users\Worker\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-01-21 206512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-01-21 3173544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-01-21 149168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-01-21 2174128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2017-10-18 3665872]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2018-01-21 9230304]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2017-06-14 1893312]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-12-21 246120]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2017-12-11 297272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2017-12-08 67384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPRadioMgr"=C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [2017-04-25 324600]
"EzClick"=C:\Program Files (x86)\ELAN\HP Pen Control\HP Pen Control.exe [2017-04-20 2208400]

C:\Users\Worker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Send to OneNote.lnk - C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
"FilterAdministratorToken"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-01-22 16:03:34 ----D---- C:\Program Files\trend micro
2018-01-22 16:03:33 ----D---- C:\rsit
2018-01-21 20:59:06 ----A---- C:\WINDOWS\system32\drivers\IntcDAud.sys
2018-01-21 20:58:53 ----A---- C:\WINDOWS\system32\drivers\Netwfw04.dat
2018-01-21 20:58:03 ----A---- C:\WINDOWS\system32\ibtproppage.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\SYSWOW64\SRCOM.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\SYSWOW64\SEHDHF32.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\SYSWOW64\SECOMN32.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRRPTR64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRCOM64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRCOM.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SRAPO64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\sltech64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\slprp64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\slcnt64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\sl3apo64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SEHDRA64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SEHDHF64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SEAPO64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2018-01-21 20:57:24 ----A---- C:\WINDOWS\system32\CX64Proxy.dll
2018-01-21 20:57:24 ----A---- C:\WINDOWS\system32\CX64APO.dll
2018-01-21 20:57:24 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2018-01-21 20:57:24 ----A---- C:\WINDOWS\system32\CAF64APO2.dll
2018-01-21 20:57:24 ----A---- C:\WINDOWS\system32\Caf64api.dll
2018-01-21 20:57:20 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2018-01-21 20:57:20 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2018-01-21 20:53:55 ----D---- C:\WINDOWS\IObit
2018-01-21 20:53:55 ----D---- C:\ProgramData\ProductData
2018-01-21 20:53:31 ----A---- C:\WINDOWS\SYSWOW64\drivers\HWiNFO64A.SYS
2018-01-21 20:53:29 ----D---- C:\Program Files (x86)\IObit
2018-01-21 20:53:22 ----D---- C:\ProgramData\IObit
2018-01-21 20:53:17 ----D---- C:\Users\Worker\AppData\Roaming\IObit
2018-01-21 20:45:17 ----D---- C:\Users\Worker\AppData\Roaming\Easeware
2018-01-21 20:45:16 ----D---- C:\Program Files\Easeware
2018-01-12 13:31:19 ----D---- C:\Program Files\Common Files\Intel
2018-01-11 17:47:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2018-01-10 16:37:24 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-01-10 16:37:24 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2018-01-10 16:37:23 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-01-10 16:37:23 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-01-10 16:37:23 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-01-10 16:37:22 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-01-10 16:37:22 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-01-10 16:37:21 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-01-10 16:37:21 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-01-10 16:37:21 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-01-10 16:37:21 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2018-01-10 16:37:21 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2018-01-10 16:37:20 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2018-01-10 16:37:20 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-01-10 16:37:20 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2018-01-10 16:37:20 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-01-10 16:37:20 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-01-10 16:37:19 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-01-10 16:37:19 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-01-10 16:37:19 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-01-10 16:37:19 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-01-10 16:37:19 ----A---- C:\WINDOWS\system32\hal.dll
2018-01-10 16:37:19 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2018-01-10 16:37:19 ----A---- C:\WINDOWS\system32\actxprxy.dll
2018-01-10 16:37:18 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2018-01-10 16:37:18 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2018-01-10 16:37:18 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-01-10 16:37:18 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2018-01-10 16:37:18 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2018-01-10 16:37:17 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-01-10 16:37:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-01-10 16:37:17 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-01-10 16:37:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-01-10 16:37:16 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-01-10 16:37:16 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-01-10 16:37:16 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\winhttp.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-01-10 16:37:15 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-01-10 16:37:14 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-01-10 16:37:14 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-01-10 16:37:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-01-10 16:37:13 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-01-10 16:37:12 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-01-10 16:37:12 ----A---- C:\WINDOWS\system32\jscript.dll
2018-01-10 16:37:12 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2018-01-10 16:37:12 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-01-10 16:37:11 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-01-10 16:37:11 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-01-10 16:37:11 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-01-10 16:37:11 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-01-10 16:37:11 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-01-10 16:37:10 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2018-01-10 16:37:10 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-01-10 16:37:10 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-01-10 16:37:09 ----A---- C:\WINDOWS\system32\services.exe
2018-01-10 16:37:09 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2018-01-10 16:37:09 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-01-10 16:37:09 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2018-01-10 16:37:08 ----A---- C:\WINDOWS\system32\msIso.dll
2018-01-10 16:37:08 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-01-10 16:37:08 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-01-10 16:37:08 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-01-10 16:37:07 ----A---- C:\WINDOWS\system32\wwansvc.dll
2018-01-10 16:37:07 ----A---- C:\WINDOWS\system32\wlansec.dll
2018-01-10 16:37:07 ----A---- C:\WINDOWS\system32\wininet.dll
2018-01-10 16:37:06 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-01-10 16:37:04 ----A---- C:\WINDOWS\system32\wmp.dll
2018-01-10 16:37:04 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-01-10 16:37:04 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-01-10 16:37:03 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-01-10 16:37:03 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-01-10 16:37:02 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-01-10 16:37:01 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2018-01-10 16:37:00 ----A---- C:\WINDOWS\system32\StartTileData.dll
2018-01-10 16:37:00 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-01-10 16:36:59 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2018-01-10 16:36:59 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2018-01-10 16:36:59 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-01-10 16:36:58 ----A---- C:\WINDOWS\system32\wow64.dll
2018-01-10 16:36:58 ----A---- C:\WINDOWS\system32\sspicli.dll
2018-01-10 16:36:58 ----A---- C:\WINDOWS\system32\LogonController.dll
2018-01-10 16:36:58 ----A---- C:\WINDOWS\explorer.exe
2018-01-10 16:36:57 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-01-10 16:36:57 ----A---- C:\WINDOWS\system32\shell32.dll
2018-01-10 16:36:56 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-01-10 16:36:55 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-01-10 16:36:53 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-01-10 16:36:53 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-01-10 16:36:53 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-01-10 16:36:52 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-01-10 16:36:52 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-01-10 16:36:52 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\system32\runexehelper.exe
2018-01-10 16:36:51 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-01-10 16:36:51 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-01-10 16:36:50 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2018-01-10 16:36:50 ----A---- C:\WINDOWS\system32\schedsvc.dll
2018-01-10 16:36:50 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2018-01-10 16:36:50 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2018-01-10 16:36:50 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-01-10 16:36:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\winload.exe
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\vac.exe
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\provtool.exe
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\provhandlers.dll
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\provengine.dll
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2018-01-10 16:36:49 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-01-10 16:36:48 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-01-10 16:36:48 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-01-10 16:36:48 ----A---- C:\WINDOWS\system32\InputService.dll
2018-01-10 16:36:48 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\UserDataService.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\ole32.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\EncDec.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-01-10 16:36:47 ----A---- C:\WINDOWS\system32\atmfd.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\winresume.exe
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\winlogon.exe
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\usermgr.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\ieui.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\DbgModel.dll
2018-01-10 16:36:46 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-01-10 16:36:45 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2018-01-10 16:36:45 ----A---- C:\WINDOWS\system32\wifitask.exe
2018-01-10 16:36:45 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-01-10 16:36:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\sysmain.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\inetcomm.dll
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\drivers\cldflt.sys
2018-01-10 16:36:44 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\Unistore.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\skci.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\rdpserverbase.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\nlasvc.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\NaturalAuth.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\mfps.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\fsdepends.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\container.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\advapi32.dll
2018-01-10 16:36:43 ----A---- C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll

LukasDr · #2 Příspěvek od **LukasDr** » 22 led 2018 16:07

2018-01-10 16:36:42 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\wscapi.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\pcasvc.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\p2psvc.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\nshhttp.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\ncsi.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\iumcrypt.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\efscore.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\dxtrans.dll
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2018-01-10 16:36:42 ----A---- C:\WINDOWS\system32\APHostService.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\SYSWOW64\nshhttp.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\wlansvc.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\webcheck.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\WcnApi.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\SyncController.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\SensorService.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\SCardDlg.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\PhoneService.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\P2P.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\nlaapi.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\icfupgd.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\drivers\winnat.sys
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\drivers\netbios.sys
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\drivers\Diskdump.sys
2018-01-10 16:36:41 ----A---- C:\WINDOWS\system32\cldapi.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\rdpserverbase.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2018-01-10 16:36:40 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2018-01-10 16:36:40 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\msoert2.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\taskcomp.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\spoolsv.exe
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\rasauto.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\provdatastore.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\pcalua.exe
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\msoert2.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\mshtmled.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\iepeers.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\fontsub.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\drivers\RfxVmt.sys
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\drivers\Dumpstorport.sys
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\convertvhd.exe
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\atmlib.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\AppLockerCSP.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\appinfo.dll
2018-01-10 16:36:39 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-12-30 12:21:16 ----D---- C:\Program Files (x86)\Apple Software Update
2017-12-28 14:57:37 ----D---- C:\Users\Worker\AppData\Roaming\mIRC
2017-12-28 14:57:37 ----D---- C:\Program Files (x86)\mIRC

======List of files/folders modified in the last 1 month======

2018-01-22 16:03:34 ----RD---- C:\Program Files
2018-01-22 16:03:34 ----D---- C:\WINDOWS\Temp
2018-01-22 16:03:04 ----D---- C:\WINDOWS\Prefetch
2018-01-22 15:35:00 ----D---- C:\WINDOWS\system32\sru
2018-01-22 15:00:09 ----D---- C:\Users\Worker\AppData\Roaming\WhatsApp
2018-01-22 13:30:33 ----D---- C:\WINDOWS\system32\SleepStudy
2018-01-22 08:57:45 ----D---- C:\WINDOWS\system32\LogFiles
2018-01-21 21:31:08 ----RD---- C:\WINDOWS\Microsoft.NET
2018-01-21 21:09:26 ----D---- C:\WINDOWS\system32\config
2018-01-21 21:07:29 ----D---- C:\WINDOWS\system32\Tasks
2018-01-21 21:06:48 ----D---- C:\WINDOWS\System32
2018-01-21 21:06:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-21 21:02:59 ----SHD---- C:\WINDOWS\Installer
2018-01-21 21:02:59 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-01-21 21:02:50 ----RD---- C:\WINDOWS\assembly
2018-01-21 21:02:49 ----D---- C:\Program Files (x86)\Common Files
2018-01-21 21:02:21 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-01-21 21:02:15 ----D---- C:\Windows
2018-01-21 21:02:15 ----D---- C:\ProgramData\NVIDIA
2018-01-21 21:02:12 ----D---- C:\WINDOWS\WinSxS
2018-01-21 21:01:59 ----D---- C:\WINDOWS\system32\drivers
2018-01-21 21:01:43 ----D---- C:\WINDOWS\system32\catroot2
2018-01-21 21:01:01 ----D---- C:\WINDOWS\Logs
2018-01-21 20:59:23 ----D---- C:\WINDOWS\INF
2018-01-21 20:59:21 ----D---- C:\WINDOWS\system32\CatRoot
2018-01-21 20:59:20 ----D---- C:\WINDOWS\system32\DriverStore
2018-01-21 20:58:03 ----A---- C:\WINDOWS\system32\ibtsiva.exe
2018-01-21 20:57:36 ----D---- C:\WINDOWS\SysWOW64
2018-01-21 20:57:34 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\SECOMN64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2018-01-21 20:57:25 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2018-01-21 20:55:28 ----SHD---- C:\System Volume Information
2018-01-21 20:53:55 ----HD---- C:\ProgramData
2018-01-21 20:53:31 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-01-21 20:53:29 ----RD---- C:\Program Files (x86)
2018-01-21 20:51:26 ----D---- C:\WINDOWS\debug
2018-01-21 20:48:10 ----D---- C:\WINDOWS\CbsTemp
2018-01-21 15:14:14 ----HD---- C:\Program Files\WindowsApps
2018-01-21 15:14:14 ----D---- C:\WINDOWS\AppReadiness
2018-01-21 15:14:07 ----D---- C:\WINDOWS\DeliveryOptimization
2018-01-17 16:58:34 ----SD---- C:\Users\Worker\AppData\Roaming\Microsoft
2018-01-14 18:59:29 ----D---- C:\WINDOWS\rescache
2018-01-12 13:32:46 ----D---- C:\ProgramData\Package Cache
2018-01-12 13:32:08 ----D---- C:\ProgramData\Intel
2018-01-12 13:31:19 ----D---- C:\Program Files\Common Files
2018-01-12 13:31:18 ----D---- C:\Program Files (x86)\Intel
2018-01-12 13:24:48 ----AD---- C:\Program Files\Intel
2018-01-12 13:24:41 ----D---- C:\Intel
2018-01-11 17:46:29 ----SD---- C:\WINDOWS\SYSWOW64\F12
2018-01-11 17:46:29 ----D---- C:\WINDOWS\TextInput
2018-01-11 17:46:29 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-01-11 17:46:28 ----SD---- C:\WINDOWS\system32\F12
2018-01-11 17:46:28 ----RSD---- C:\WINDOWS\Fonts
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\oobe
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\migwiz
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\migration
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\Dism
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\Boot
2018-01-11 17:46:28 ----D---- C:\WINDOWS\system32\appraiser
2018-01-11 17:46:28 ----D---- C:\WINDOWS\Provisioning
2018-01-11 17:46:28 ----D---- C:\WINDOWS\apppatch
2018-01-11 17:46:28 ----D---- C:\Program Files\internet explorer
2018-01-11 17:46:28 ----D---- C:\Program Files (x86)\Internet Explorer
2018-01-10 16:52:48 ----D---- C:\WINDOWS\system32\MRT
2018-01-10 16:42:40 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-01-10 16:42:36 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-01-10 16:38:49 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2018-01-10 16:38:34 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2018-01-10 16:38:29 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-01-09 11:47:38 ----D---- C:\Users\Worker\AppData\Roaming\vlc
2018-01-03 11:55:01 ----D---- C:\WINDOWS\SoftwareDistribution
2018-01-02 19:10:10 ----D---- C:\WINDOWS\system32\NDF
2017-12-23 16:44:00 ----D---- C:\Users\Worker\AppData\Roaming\.ACEStream
2017-12-23 14:25:32 ----HD---- C:\_acestream_cache_
2017-12-23 12:29:33 ----D---- C:\WINDOWS\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2017-12-21 199448]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2017-12-21 343768]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2017-12-21 57696]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-12-21 84384]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-12-21 358672]
R0 hpdskflt;@oem31.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2017-10-03 40472]
R0 iaStorA;@oem53.inf,%iaStorA.DeviceDesc%;Intel(R) Chipset SATA/PCIe RST Premium Controller; C:\WINDOWS\System32\drivers\iaStorA.sys [2018-01-21 905736]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-09-29 56728]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2017-12-21 185096]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2017-12-21 321512]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2017-12-21 110336]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-12-21 1025176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2018-01-13 457896]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-01-01 59800]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-09-29 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-09-29 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2018-01-21 27552]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2018-01-13 146648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2017-12-21 204456]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-01-01 385024]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-09-29 43520]
R3 Accelerometer;@oem31.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2017-10-03 54296]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2017-09-29 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-09-29 60312]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2017-06-12 74168]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2017-06-12 69560]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2017-06-12 382392]
R3 ETD;@oem45.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2017-10-18 610376]
R3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-09-29 79360]
R3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-09-29 171520]
R3 ibtusb;@oem54.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2018-01-21 246280]
R3 igfx;igfx; C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\igdkmd64.sys [2017-06-12 12821936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2018-01-21 5839840]
R3 IntcDAud;@oem58.inf,%IntcAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2018-01-21 808944]
R3 MEIx64;@oem50.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2018-01-21 206496]
R3 Netwtw04;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 10 64 Bit; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [2018-01-21 7638536]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhm.inf_amd64_f0b2a5e1e71031b3\nvlddmkm.sys [2017-10-16 15620208]
R3 nvvad_WaveExtensible;@oem55.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2018-01-21 50808]
R3 nvvhci;@oem22.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2017-06-14 57792]
R3 RTSPER;@oem51.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2018-01-21 782816]
R3 SensorsHIDClassDriver;@SensorsHidClassDriver.inf,%WudfSensorsHIDClassDriverDisplayName%;UMDF Reflector service for Sensors HID Class Driver; C:\WINDOWS\System32\drivers\WUDFRd.sys [2017-09-29 259584]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2017-09-29 37784]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-09-29 357272]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-09-29 123800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-09-29 103320]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-09-29 63520]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-09-29 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-09-29 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2017-09-29 39832]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-09-29 118168]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-09-29 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-09-29 18432]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-12-21 46976]
S3 aswTap;@oem46.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\WINDOWS\System32\drivers\aswTap.sys [2017-11-19 53904]
S3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2017-09-29 191488]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2017-09-29 105472]
S3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth handsfree; C:\WINDOWS\system32\DRIVERS\BthHfAud.sys [2017-09-29 46592]
S3 bthl2cap;@bthl2cap.inf,%bthl2cap_desc%;Ovladač podpory protokolu Microsoft Bluetooth; C:\WINDOWS\system32\DRIVERS\bthl2cap.sys [2017-09-29 83968]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2017-09-29 78848]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2017-09-29 129536]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2017-11-19 1015296]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-29 39424]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-09-29 122368]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-09-29 1723288]
S3 ETDSMBus;ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [2017-05-22 32816]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-09-29 20992]
S3 HID_PCI;@oem29.inf,%HID_PCI%;HID PCI Minidriver for ISS; C:\WINDOWS\System32\drivers\HID_PCI.sys [2017-04-18 32888]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-09-29 50584]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-09-29 73112]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2017-09-29 27136]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-09-29 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-09-29 91648]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-09-29 88576]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-09-29 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-09-29 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-09-29 39424]
S3 invdimm;@invdimm.inf,%invdimm.SvcDesc%;Microsoft iNVDIMM device driver; C:\WINDOWS\System32\drivers\invdimm.sys [2017-09-29 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2017-09-29 26112]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-09-29 119808]
S3 ISH;@oem1.inf,%TEE_SvcDesc%;Intel(R) Integrated Sensor Solution; C:\WINDOWS\System32\drivers\ISH.sys [2017-04-18 152184]
S3 ISH_BusDriver;@oem39.inf,%ISH_BusDriver.SVCDESC%; ISS Bus Enumerator; C:\WINDOWS\System32\drivers\ISH_BusDriver.sys [2017-04-18 88184]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-09-29 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-09-29 55840]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-09-29 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-09-29 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-09-29 132608]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-09-29 88576]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-06-14 30144]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-09-29 100352]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2017-09-29 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-09-29 936856]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2017-09-29 189440]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2017-09-29 103936]
S3 rtux64w10;@rtux64w10.inf,%Rtlunic.Service.DispName%;Realtek USB FE/GbE NIC Family Windows 10 64-bit Driver; C:\WINDOWS\System32\drivers\rtux64w10.sys [2017-09-29 348672]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-09-29 33176]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2017-11-27 83768]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-12-21 301168]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 CDPUserSvc_155fb4;Uživatelská služba platformy připojených zařízení_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-01-15 7780528]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 cplspcon;Intel(R) Content Protection HDCP Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHDCPSvc.exe [2017-06-12 611760]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 esifsvc;@oem9.inf,%ServiceDisplayName%;Intel(R) Dynamic Platform and Thermal Framework service; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2017-06-12 1700968]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2017-10-18 153040]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-08-07 641192]
R2 hp3ddgsrv;@oem31.inf,%hpservice_desc%;HP 3DDG Service; C:\WINDOWS\system32\HP3DDGService.exe [2017-10-03 130072]
R2 HPJumpStartBridge;HP JumpStart Bridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [2017-05-23 471040]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-11-21 332144]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2017-06-09 17992]
R2 ibtsiva;@oem54.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\WINDOWS\system32\ibtsiva []
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\igfxCUIService.exe [2017-06-12 415152]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2017-06-05 197264]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-09-16 462968]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-06-14 449984]
R2 OneSyncSvc_155fb4;Hostitel synchronizace_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-08-07 157864]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2018-01-21 324608]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-01-01 519152]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2017-12-21 7538536]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\System32\DriverStore\FileRepository\ki122753.inf_amd64_5b30accad7fa3bba\IntelCpHeciSvc.exe [2017-06-12 397224]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-11-19 43648]
R3 hpqcaslwmiex;HP CASL Framework Service; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [2016-09-28 1077752]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R3 PimIndexMaintenanceSvc_155fb4;Data kontaktů_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-12 107848]
S2 Intel(R) TPM Provisioning Service;Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [2017-02-24 548648]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc_155fb4;Tok zařízení_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-09-29 85504]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-12 107848]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2017-02-24 732448]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2017-12-11 672568]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService_155fb4;Služba zasílání zpráv_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-08-07 269480]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-14 495040]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-14 495040]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-01-15 208552]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc_155fb4;PrintWorkflow_155fb4; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-09-29 1288704]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]

-----------------EOF-----------------

#3 Příspěvek od **Rudy** » 22 led 2018 16:18

Ty chyby jsou v pořádku. Je-li soubor offline, nebo je-li zaheslovaný archiv, Avast se tam nedostane a tudíž jej nezkontroluje. Z těch souborů prakticky nelze si PC zavirovat. Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

LukasDr · #4 Příspěvek od **LukasDr** » 23 led 2018 11:16

Tak snad to pomohlo

Díky moc za pomoc!

# AdwCleaner 7.0.7.0 - Logfile created on Tue Jan 23 10:14:23 2018
# Updated on 2018/18/01 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\Worker\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Users\Worker\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Users\Worker\AppData\Roaming\acestream
Deleted: C:\Users\Worker\AppData\LocalLow\.acestream
Deleted: C:\Users\Worker\AppData\Roaming\.acestream
Deleted: C:\_acestream_cache_

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted: Driver Booster Scheduler

***** [ Registry ] *****

Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vshare.io
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\vshare.io
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{43E2AE3A-9719-4188-A3CB-C78D42341FD0}C:\users\worker\appdata\roaming\acestream\engine\ace_engine.exe
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{DD4EB767-64FA-490D-AC83-27688BD8E996}C:\users\worker\appdata\roaming\acestream\engine\ace_engine.exe
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{B6E3EA80-0A1D-48D8-8DE8-21CB8CF4B0DD}C:\users\worker\appdata\roaming\acestream\engine\ace_engine.exe
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9B639F49-A37F-464A-A3D7-5C4607076B54}C:\users\worker\appdata\roaming\acestream\engine\ace_engine.exe
Deleted: [Key] - HKU\S-1-5-21-1567513550-338320833-3692928166-1001\Software\AceStream
Deleted: [Key] - HKU\S-1-5-21-1567513550-338320833-3692928166-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\AceStream
Deleted: [Key] - HKCU\Software\AceStream
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AceStream
Deleted: [Key] - HKCU\Software\Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17}
Deleted: [Key] - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acelive
Deleted: [Key] - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acemedia
Deleted: [Key] - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acestream
Deleted: [Key] - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tslive
Deleted: [Key] - HKCU\SOFTWARE\Classes\Applications\ace_player.exe
Deleted: [Key] - HKCU\SOFTWARE\Classes\MIME\Database\Content Type\application\x-acestream-plugin
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayCDAudioOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDAudioOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDMovieOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayMusicFilesOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlaySVCDMovieOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVCDMovieOnArrival
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVideoFilesOnArrival
Deleted: [Key] - HKCU\Software\Classes\AudioCD\shell\PlayWithACEStream
Deleted: [Key] - HKCU\Software\Classes\DVD\shell\PlayWithACEStream
Deleted: [Key] - HKCU\Software\Classes\Applications\ace_player.exe
Deleted: [Key] - HKCU\Software\Classes\MIME\Database\Content Type\application\x-acestream-plugin
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acelive
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acemedia
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acestream
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tslive
Deleted: [Value] - HKCU\Software\RegisteredApplications|AceStream

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [5695 B] - [2018/1/23 10:13:6]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

#5 Příspěvek od **Rudy** » 23 led 2018 13:36

To čištění bychom mohli dokončit. Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

VIRY.CZ

Chyba 42006 Avast

Chyba 42006 Avast

Re: Chyba 42006 Avast

Re: Chyba 42006 Avast

Re: Chyba 42006 Avast

Re: Chyba 42006 Avast