Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu - zpomalení PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
veny
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 27 srp 2006 21:27

Prosím o kontrolu - zpomalení PC

#1 Příspěvek od veny »

Dobrý den
prosím o kontrolu logu RSIT, zpomalení PC, očista antivirem SOPHOS.
Bohužel nemohu udělat scan FRST.


Logfile of random's system information tool 1.10 (written by random/random)
Run by HANA at 2018-03-16 07:34:08
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 354 GB (77%) free of 462 GB
Total RAM: 4018 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:34:19, on 16.3.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18939)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files\trend micro\HANA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.236.148.65/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMDTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMDTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: True Key Helper - {0F4B8786-5502-4803-8EBC-F652A1153BB6} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll
O3 - Toolbar: True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-80-2885764129-887777008-271615777-1616004480-2722851051\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'ReportServer')
O4 - HKUS\S-1-5-80-2885764129-887777008-271615777-1616004480-2722851051\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'ReportServer')
O4 - HKUS\S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQLFDLauncher')
O4 - HKUS\S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQLFDLauncher')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQL$SQLEXPRESS')
O4 - HKUS\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQL$SQLEXPRESS')
O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQLSERVER')
O4 - HKUS\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQLSERVER')
O4 - HKUS\S-1-5-80-425977601-1203083412-1631309457-2457533047-3321749933\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'ReportServer$SQLEXPRESS')
O4 - HKUS\S-1-5-80-425977601-1203083412-1631309457-2457533047-3321749933\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'ReportServer$SQLEXPRESS')
O4 - HKUS\S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'MSSQLFDLauncher$SQLEXPRESS')
O4 - HKUS\S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'MSSQLFDLauncher$SQLEXPRESS')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.690\SSScheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://app.celnisprava.cz
O15 - Trusted Zone: http://www.celnisprava.cz
O15 - Trusted IP range: http://213.236.148.65
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HitmanPro.Alert service (hmpalertsvc) - SurfRight B.V. - C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) TPM Provisioning Service - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.690\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @C:\Windows\system32\COMRES.DLL,-2797 (MSDTC) - Unknown owner - C:\Windows\system32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Limited - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Limited - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sophos Network Threat Protection (SntpService) - Sophos Limited - C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Limited - C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
O23 - Service: Sophos Clean (Sophos Clean Service) - Sophos Limited - C:\Program Files (x86)\Sophos\Clean\Clean.exe
O23 - Service: Sophos Device Control Service - Sophos Limited - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcservice.exe
O23 - Service: Sophos File Scanner Service - Sophos Limited - C:\Program Files\Sophos\Sophos File Scanner\SophosFS.exe
O23 - Service: Sophos Health Service - Sophos Limited - C:\Program Files (x86)\Sophos\Health\Health.exe
O23 - Service: Sophos MCS Agent - Sophos Limited - C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe
O23 - Service: Sophos MCS Client - Sophos Limited - C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe
O23 - Service: Sophos Safestore (Sophos Safestore Service) - Sophos Limited - C:\Program Files\Sophos\Safestore\Safestore64.exe
O23 - Service: Sophos System Protection Service - Sophos Limited - C:\Program Files\Sophos\Endpoint Defense\SSPService.exe
O23 - Service: Sophos Web Control Service - Sophos Limited - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Sophos Web Intelligence Service (swi_service) - Sophos Limited - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
O23 - Service: Sophos Web Intelligence Update (swi_update_64) - Sophos Limited - C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: Intel Security True Key (TrueKey) - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) - McAfee, Inc. - C:\Program Files\TrueKey\McTkSchedulerService.exe
O23 - Service: TrueKeyServiceHelper - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15860 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /service
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /tray
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 21353648
\??\C:\Windows\system32\conhost.exe "-80785372117250869531247375013-1058113526-1487425327-188878510-1464883370-1918531435
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k apphost
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\SysWow64\IntelCpHeciSvc.exe
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe"
"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe"
"C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe"
"C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe"
"C:\Program Files (x86)\Sophos\Clean\Clean.exe" /service
"C:\Windows\System32\igfxTray.exe"
"C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE"
"C:\Program Files\Sophos\Sophos File Scanner\SophosFS.exe"
"C:\Windows\system32\igfxEM.exe" -Embedding
"C:\Program Files\Sophos\Sophos UI\Sophos UI.exe" /hidden
"C:\Program Files (x86)\Sophos\Health\Health.exe"
"C:\Program Files\Sophos\Sophos File Scanner\SophosFileScanner.exe" --host --engine-path "C:\Program Files\Sophos\Sophos Standalone Engine\engine1\engine\15179044050770704" --data-path "C:\Program Files\Sophos\Sophos Standalone Engine\engine1\data\15209297543596514" --process-registry-key "SOFTWARE\Sophos\Sophos File Scanner\Scanner" --log-level 1 --ml-scan-path "C:\Program Files\Sophos\Sophos ML Engine\ML1\scan\15179044566819610" --ml-telemetry-path "C:\Program Files\Sophos\Sophos ML Engine\ML1\telemetry\15191953767967322"
"C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\Sophos\Sophos File Scanner\SophosFileScanner.exe" --worker --engine-path "C:\Program Files\Sophos\Sophos Standalone Engine\engine1\engine\15179044050770704" --data-path "C:\Program Files\Sophos\Sophos Standalone Engine\engine1\data\15209297543596514" --pipe-name 2741534314 --log-level 1 --thread-count 12 --ml-scan-path "C:\Program Files\Sophos\Sophos ML Engine\ML1\scan\15179044566819610" --ml-telemetry-path "C:\Program Files\Sophos\Sophos ML Engine\ML1\telemetry\15191953767967322"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\McAfee Security Scan\3.11.690\SSScheduler.exe"
C:\Windows\system32\PrintIsolationHost.exe -Embedding
"C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe"
"C:\Program Files\Sophos\Safestore\Safestore64.exe" /service
"C:\Program Files\Sophos\Endpoint Defense\SSPService.exe"
"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe"
"C:\Program Files\TrueKey\McTkSchedulerService.exe"
C:\Windows\system32\svchost.exe -k iissvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe" -s MSSQL12.SQLEXPRESS
"c:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdhost.exe" "MSSQL12.SQLEXPRESSCc09e28a8f62fcf4b78f8cdaf335e9c4b403f8h0h" "MSSQL12.SQLEXPRESS" "MSSQL12.SQLEXPRESS" "8" "" "4096" "M" "0" "" "" ""
\??\C:\Windows\system32\conhost.exe "-5281290791688563824857783630-556815648-136238947179324509-71534766206260153
"C:\Windows\SysWOW64\RunDll32.exe" "c:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe" -s MSSQL12.MSSQLSERVER
"c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcservice.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"c:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\fdhost.exe" "MSSQL12.MSSQLSERVERJ02252599f0287f4973fbe84f61ec5e47d7ca9ee4" "MSSQL12.MSSQLSERVER" "MSSQL12.MSSQLSERVER" "8" "" "4096" "M" "0" "" "" ""
\??\C:\Windows\system32\conhost.exe "-1906078076640462099160987836221115970938071711261683341812-1991076075-1938355005
C:\Windows\system32\svchost.exe -k bthsvcs
igfxHK.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939

"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe"
"taskhost.exe"
taskeng.exe {3CEDB3C0-2EA4-49F6-9AA9-7588B92141B1}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe108_ Global\UsGthrCtrlFltPipeMssGthrPipe108 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 612 616 624 65536 620
"C:\Users\HANA\Desktop\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\HANA\AppData\Roaming\Mozilla\Firefox\Profiles\myjau3wa.default

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.101.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Skype for Business Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F4B8786-5502-4803-8EBC-F652A1153BB6}]
True Key Helper - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-09-25 1429728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2018-02-14 236720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 580312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 2179376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F4B8786-5502-4803-8EBC-F652A1153BB6}]
True Key Helper - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-09-25 1056992]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2018-02-14 171192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 403672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 1524016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28 186944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - True Key - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-09-25 1429728]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - True Key - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-09-25 1056992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-01-18 7510232]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2018-01-30 400768]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe []
"Persistence"=C:\windows\system32\igfxpers.exe []
"MFNetworkScanUtility"=C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [2009-12-15 508312]
"Seagull Drivers"=ssdal_nc.exe startup []
"Sophos UI.exe"=C:\Program Files\Sophos\Sophos UI\Sophos UI.exe [2018-02-06 2850056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Discover HP Touchpoint Manager]
C:\Program Files (x86)\Hewlett-Packard\HP Touchpoint Manager\Discover HP Touchpoint Manager\LHBeacon.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"ISUSPM"=C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2012-03-14 2073976]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22 598552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.690\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
"C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SAVService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SntpService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Sophos File Scanner Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-03-16 07:34:08 ----D---- C:\rsit
2018-03-16 07:34:08 ----D---- C:\Program Files\trend micro
2018-03-15 17:40:45 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-03-15 17:29:47 ----A---- C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2018-03-15 17:13:37 ----D---- C:\Intel
2018-03-15 17:10:32 ----D---- C:\ProgramData\SlimWare Utilities, Inc
2018-03-15 16:48:46 ----A---- C:\Windows\system32\drivers\SWDUMon.sys
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-03-14 07:50:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-03-14 07:50:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-03-14 07:50:29 ----A---- C:\Windows\system32\jsproxy.dll
2018-03-14 07:50:29 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-03-14 07:50:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-03-14 07:50:29 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-03-14 07:50:29 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-03-14 07:50:28 ----A---- C:\Windows\system32\wininet.dll
2018-03-14 07:50:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-03-14 07:50:28 ----A---- C:\Windows\system32\mshtmled.dll
2018-03-14 07:50:28 ----A---- C:\Windows\system32\jscript9diag.dll
2018-03-14 07:50:28 ----A---- C:\Windows\system32\jscript9.dll
2018-03-14 07:50:28 ----A---- C:\Windows\system32\ieui.dll
2018-03-14 07:50:27 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-03-14 07:50:27 ----A---- C:\Windows\system32\mshtml.dll
2018-03-14 07:50:25 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-03-14 07:50:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-03-14 07:50:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-03-14 07:50:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-03-14 07:50:22 ----A---- C:\Windows\system32\msfeeds.dll
2018-03-14 07:50:22 ----A---- C:\Windows\system32\ieapfltr.dll
2018-03-14 07:50:21 ----A---- C:\Windows\system32\ieframe.dll
2018-03-14 07:50:20 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-03-14 07:50:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-03-14 07:50:20 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-03-14 07:50:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-03-14 07:50:20 ----A---- C:\Windows\system32\vbscript.dll
2018-03-14 07:50:20 ----A---- C:\Windows\system32\urlmon.dll
2018-03-14 07:50:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-03-14 07:50:20 ----A---- C:\Windows\system32\jscript.dll
2018-03-14 07:50:20 ----A---- C:\Windows\system32\ieUnatt.exe
2018-03-14 07:50:20 ----A---- C:\Windows\system32\iertutil.dll
2018-03-14 07:50:19 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-03-14 07:50:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-03-14 07:50:19 ----A---- C:\Windows\system32\win32k.sys
2018-03-14 07:50:19 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-03-14 07:50:18 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-03-14 07:50:18 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2018-03-14 07:50:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-03-14 07:50:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-03-14 07:50:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-03-14 07:50:18 ----A---- C:\Windows\system32\webcheck.dll
2018-03-14 07:50:18 ----A---- C:\Windows\system32\msrating.dll
2018-03-14 07:50:18 ----A---- C:\Windows\system32\iedkcs32.dll
2018-03-14 07:50:18 ----A---- C:\Windows\system32\ie4uinit.exe
2018-03-14 07:50:18 ----A---- C:\Windows\system32\dxtrans.dll
2018-03-14 07:50:18 ----A---- C:\Windows\system32\dxtmsft.dll
2018-03-14 07:50:17 ----A---- C:\Windows\system32\msi.dll
2018-03-14 07:50:17 ----A---- C:\Windows\system32\inseng.dll
2018-03-14 07:50:17 ----A---- C:\Windows\system32\iernonce.dll
2018-03-14 07:50:16 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2018-03-14 07:50:16 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-03-14 07:50:16 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-03-14 07:50:16 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-03-14 07:50:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-03-14 07:50:16 ----A---- C:\Windows\system32\zipfldr.dll
2018-03-14 07:50:16 ----A---- C:\Windows\system32\WinSCard.dll
2018-03-14 07:50:16 ----A---- C:\Windows\system32\scesrv.dll
2018-03-14 07:50:16 ----A---- C:\Windows\system32\occache.dll
2018-03-14 07:50:15 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-03-14 07:50:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-03-14 07:50:15 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-03-14 07:50:15 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-03-14 07:50:15 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\TSpkg.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\streamci.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\ntdll.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\msra.exe
2018-03-14 07:50:15 ----A---- C:\Windows\system32\msihnd.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\iesetup.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\hal.dll
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\pci.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-03-14 07:50:15 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-03-14 07:50:14 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-03-14 07:50:14 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-03-14 07:50:14 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-03-14 07:50:14 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-03-14 07:50:14 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-03-14 07:50:13 ----A---- C:\Windows\SYSWOW64\sdchange.exe
2018-03-14 07:50:13 ----A---- C:\Windows\system32\winload.exe
2018-03-14 07:50:13 ----A---- C:\Windows\system32\sdchange.exe
2018-03-14 07:50:13 ----A---- C:\Windows\system32\rpcrt4.dll
2018-03-14 07:50:13 ----A---- C:\Windows\system32\racpldlg.dll
2018-03-14 07:50:13 ----A---- C:\Windows\system32\msrahc.dll
2018-03-14 07:50:13 ----A---- C:\Windows\system32\lsasrv.dll
2018-03-14 07:50:13 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-03-14 07:50:13 ----A---- C:\Windows\system32\consent.exe
2018-03-14 07:50:13 ----A---- C:\Windows\system32\certcli.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\racpldlg.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\msra.exe
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-03-14 07:50:12 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\winsrv.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\wdigest.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\srcore.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\smss.exe
2018-03-14 07:50:12 ----A---- C:\Windows\system32\schannel.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\rstrui.exe
2018-03-14 07:50:12 ----A---- C:\Windows\system32\ncrypt.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\msv1_0.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\kernel32.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\kerberos.dll
2018-03-14 07:50:12 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-03-14 07:50:12 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-03-14 07:50:12 ----A---- C:\Windows\system32\conhost.exe
2018-03-14 07:50:12 ----A---- C:\Windows\system32\advapi32.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-03-14 07:50:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\wow64win.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\sspicli.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\rpchttp.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\ntvdm64.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\KernelBase.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-03-14 07:50:11 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-03-14 07:50:11 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-03-14 07:50:11 ----A---- C:\Windows\system32\csrsrv.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\bcrypt.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\auditpol.exe
2018-03-14 07:50:11 ----A---- C:\Windows\system32\appidsvc.dll
2018-03-14 07:50:11 ----A---- C:\Windows\system32\appidapi.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-14 07:50:10 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-03-14 07:50:10 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\wow64cpu.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\wow64.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\sspisrv.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\srclient.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\secur32.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\msiexec.exe
2018-03-14 07:50:10 ----A---- C:\Windows\system32\lsass.exe
2018-03-14 07:50:10 ----A---- C:\Windows\system32\drivers\appid.sys
2018-03-14 07:50:10 ----A---- C:\Windows\system32\cryptbase.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\credssp.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\authui.dll
2018-03-14 07:50:10 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-03-14 07:50:10 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-03-14 07:50:10 ----A---- C:\Windows\system32\apisetschema.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-03-14 07:50:09 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-03-14 07:50:08 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-14 07:50:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-03-14 07:50:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-03-14 07:50:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-14 07:50:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-03-14 07:50:07 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-03-14 07:50:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-03-14 07:50:06 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-03-14 07:50:06 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-03-14 07:50:06 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-03-14 07:50:06 ----A---- C:\Windows\system32\appinfo.dll
2018-03-14 07:50:05 ----A---- C:\Windows\SYSWOW64\user.exe
2018-03-14 07:50:05 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-03-14 07:50:05 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-03-14 07:50:05 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-03-14 07:50:05 ----A---- C:\Windows\system32\msobjs.dll
2018-03-14 07:50:05 ----A---- C:\Windows\system32\msaudite.dll
2018-03-14 07:50:05 ----A---- C:\Windows\system32\adtschema.dll
2018-03-14 07:50:03 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-03-14 07:50:03 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-03-14 07:50:03 ----A---- C:\Windows\system32\tzres.dll
2018-03-14 07:50:03 ----A---- C:\Windows\system32\msimsg.dll
2018-03-14 07:45:40 ----A---- C:\Windows\system32\generaltel.dll
2018-03-14 07:45:40 ----A---- C:\Windows\system32\devinv.dll
2018-03-14 07:45:40 ----A---- C:\Windows\system32\appraiser.dll
2018-03-14 07:45:40 ----A---- C:\Windows\system32\aeinv.dll
2018-03-14 07:45:39 ----A---- C:\Windows\system32\invagent.dll
2018-03-14 07:45:39 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-03-14 07:45:39 ----A---- C:\Windows\system32\centel.dll
2018-03-14 07:45:39 ----A---- C:\Windows\system32\aitstatic.exe
2018-03-14 07:45:39 ----A---- C:\Windows\system32\aepic.dll
2018-03-14 07:45:39 ----A---- C:\Windows\system32\acmigration.dll
2018-03-09 10:57:27 ----D---- C:\Users\HANA\AppData\Roaming\Skype
2018-03-07 14:22:47 ----A---- C:\Windows\SYSWOW64\hmpalert.dll
2018-03-07 14:22:47 ----A---- C:\Windows\system32\hmpalert.dll
2018-02-21 09:16:32 ----D---- C:\ProgramData\McAfee Security Scan

======List of files/folders modified in the last 1 month======

2018-03-16 07:34:19 ----D---- C:\Windows\Prefetch
2018-03-16 07:34:18 ----D---- C:\Windows\CryptoGuard
2018-03-16 07:34:16 ----D---- C:\Windows\Temp
2018-03-16 07:34:08 ----RD---- C:\Program Files
2018-03-16 07:24:00 ----D---- C:\ProgramData\HitmanPro.Alert
2018-03-16 04:17:58 ----D---- C:\Windows\system32\config
2018-03-16 04:07:00 ----D---- C:\Windows\inf
2018-03-15 20:38:40 ----D---- C:\Windows\rescache
2018-03-15 18:31:34 ----D---- C:\Windows\System32
2018-03-15 18:31:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-03-15 18:24:47 ----D---- C:\Windows
2018-03-15 18:18:53 ----D---- C:\Windows\system32\catroot
2018-03-15 18:17:43 ----D---- C:\Windows\debug
2018-03-15 18:06:10 ----D---- C:\Program Files\Intel
2018-03-15 18:05:39 ----D---- C:\Windows\SysWOW64
2018-03-15 18:04:38 ----D---- C:\Windows\system32\drivers
2018-03-15 18:03:57 ----D---- C:\Windows\system32\DriverStore
2018-03-15 18:01:20 ----SHD---- C:\System Volume Information
2018-03-15 17:57:19 ----SHD---- C:\Windows\Installer
2018-03-15 17:57:18 ----RD---- C:\Program Files (x86)
2018-03-15 17:56:54 ----D---- C:\Windows\system32\catroot2
2018-03-15 17:51:08 ----D---- C:\Program Files (x86)\Intel
2018-03-15 17:50:51 ----D---- C:\Windows\system32\Tasks
2018-03-15 17:49:59 ----D---- C:\ProgramData\Package Cache
2018-03-15 17:48:10 ----D---- C:\Program Files (x86)\Common Files
2018-03-15 17:46:58 ----D---- C:\Windows\SYSWOW64\drivers
2018-03-15 17:41:31 ----D---- C:\Windows\Tasks
2018-03-15 17:29:22 ----D---- C:\Windows\winsxs
2018-03-15 17:18:23 ----D---- C:\Program Files\Internet Explorer
2018-03-15 17:18:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-03-15 17:18:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-03-15 17:18:15 ----D---- C:\Windows\PolicyDefinitions
2018-03-15 17:18:14 ----D---- C:\Windows\system32\en-US
2018-03-15 17:18:06 ----D---- C:\Windows\AppPatch
2018-03-15 17:18:04 ----D---- C:\Windows\system32\CodeIntegrity
2018-03-15 17:18:04 ----D---- C:\Windows\system32\Boot
2018-03-15 17:18:02 ----D---- C:\Windows\system32\appraiser
2018-03-15 17:13:40 ----D---- C:\Windows\system32\MRT
2018-03-15 17:10:32 ----HD---- C:\ProgramData
2018-03-15 17:06:52 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-03-15 17:06:40 ----AC---- C:\Windows\system32\MRT.exe
2018-03-15 16:25:42 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-15 16:25:42 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-03-14 16:36:42 ----D---- C:\ProgramData\Microsoft Help
2018-03-14 16:34:45 ----A---- C:\Windows\win.ini
2018-03-14 08:33:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-03-14 08:33:07 ----D---- C:\Windows\system32\Macromed
2018-03-14 08:33:04 ----D---- C:\Windows\SYSWOW64\Macromed
2018-03-13 15:54:41 ----D---- C:\Dokumenty
2018-03-08 07:23:15 ----D---- C:\Program Files (x86)\HitmanPro.Alert
2018-02-21 09:16:44 ----D---- C:\Program Files\McAfee Security Scan

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\drivers\iaStorA.sys [2014-06-07 670056]
R0 iaStorF;iaStorF; C:\Windows\system32\drivers\iaStorF.sys [2014-06-07 28008]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\drivers\iusb3hcs.sys [2013-04-26 20464]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R0 Sophos Endpoint Defense;Sophos Endpoint Defense Mini-Filter Driver; C:\Windows\system32\DRIVERS\SophosED.sys [2018-02-15 522824]
R0 stornvme;Microsoft Standard NVM Express Driver; C:\Windows\system32\drivers\stornvme.sys [2014-12-09 50616]
R0 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 hmpalert;HitmanPro.Alert Support Driver; \??\C:\Windows\system32\drivers\hmpalert.sys [2018-03-07 294688]
R1 SAVOnAccess;SAVOnAccess; C:\Windows\system32\DRIVERS\savonaccess.sys [2017-09-27 204328]
R1 sntp;sntp; C:\Windows\system32\DRIVERS\sntp.sys [2017-12-20 125880]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2015-06-22 60416]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2013-10-02 172760]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-04-07 8071888]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-12-04 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\windows\system32\drivers\btwampfl.sys [2012-12-04 598808]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-02 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-18 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-03-06 21544]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2018-01-30 4943744]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-01-22 3849304]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\drivers\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\drivers\iusb3xhc.sys [2013-04-26 786416]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-10-07 201296]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-11-26 888536]
R3 sdcfilter;sdcfilter; C:\Windows\system32\DRIVERS\sdcfilter.sys [2017-06-02 38144]
R3 StillCam;Still Serial Digital Camera Driver; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-12-04 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-03-31 460048]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2018-03-15 16056]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-12-04 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2015-06-22 18432]
S4 RsFx0320;RsFx0320 Driver; C:\Windows\system32\DRIVERS\RsFx0320.sys [2016-06-18 250048]
S4 SophosBootDriver;SophosBootDriver; C:\Windows\system32\DRIVERS\SophosBootDriver.sys [2017-06-02 45840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2014-03-07 1008344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hmpalertsvc;HitmanPro.Alert service; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [2018-02-13 4653760]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2018-01-30 362880]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2017-10-23 213648]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2017-10-23 419984]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2017-07-03 372416]
R2 MSSQLSERVER;SQL Server (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [2017-07-03 372416]
R2 ReportServer$SQLEXPRESS;SQL Server Reporting Services (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2016-06-18 2536640]
R2 ReportServer;SQL Server Reporting Services (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2016-06-18 2536640]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-01-08 290520]
R2 SAVAdminService;Sophos Anti-Virus status reporter; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [2018-01-26 235872]
R2 SAVService;Sophos Anti-Virus; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [2018-01-26 200064]
R2 SntpService;Sophos Network Threat Protection; C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe [2017-12-20 1806960]
R2 Sophos AutoUpdate Service;Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [2018-01-09 773080]
R2 Sophos Clean Service;Sophos Clean; C:\Program Files (x86)\Sophos\Clean\Clean.exe [2018-01-09 3709384]
R2 Sophos File Scanner Service;Sophos File Scanner Service; C:\Program Files\Sophos\Sophos File Scanner\SophosFS.exe [2017-12-19 1329528]
R2 Sophos Health Service;Sophos Health Service; C:\Program Files (x86)\Sophos\Health\Health.exe [2017-12-05 1720648]
R2 Sophos MCS Agent;Sophos MCS Agent; C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe [2017-09-27 1301976]
R2 Sophos MCS Client;Sophos MCS Client; C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe [2017-09-27 1715464]
R2 Sophos Safestore Service;Sophos Safestore; C:\Program Files\Sophos\Safestore\Safestore64.exe [2018-02-06 1872880]
R2 Sophos System Protection Service;Sophos System Protection Service; C:\Program Files\Sophos\Endpoint Defense\SSPService.exe [2018-02-15 9412344]
R2 Sophos Web Control Service;Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [2017-09-27 360040]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2016-06-18 134336]
R2 swi_service;Sophos Web Intelligence Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2018-01-26 3620968]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-12-19 7757552]
R2 TrueKey;Intel Security True Key; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [2017-09-21 1001920]
R2 TrueKeyScheduler;Intel Security True Key Scheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [2017-09-21 16928]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2018-01-30 502656]
R3 MSSQLFDLauncher$SQLEXPRESS;SQL Full-text Filter Daemon Launcher (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [2014-02-21 50880]
R3 MSSQLFDLauncher;SQL Full-text Filter Daemon Launcher (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [2014-02-21 50880]
R3 Sophos Device Control Service;Sophos Device Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcservice.exe [2018-01-26 506008]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-27 154440]
S2 Intel(R) TPM Provisioning Service;Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [2017-09-21 668472]
S2 swi_update_64;Sophos Web Intelligence Update; C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe [2018-01-26 2121216]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-14 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-27 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-02-10 116224]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2017-09-21 742704]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.690\McCHSvc.exe [2018-02-19 405400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-03-15 194512]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-13 212696]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-07-30 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TrueKeyServiceHelper;TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [2017-09-21 87760]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-07-26 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2017-07-03 613056]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2014-02-21 270016]
S4 SQLSERVERAGENT;SQL Server Agent (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [2017-07-03 613056]

-----------------EOF-----------------

díky V.

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15192
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu - zpomalení PC

#2 Příspěvek od JaRon »

ahoj,
Hitman-Sophos-McAfee >> dva z trojice odinstaluj a vycisti PC s CCleanerom, vcetne registrov
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

veny
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 27 srp 2006 21:27

Re: Prosím o kontrolu - zpomalení PC

#3 Příspěvek od veny »

McAfee fuč, Hitman je modul Sophosu.Pročištěno CCleanerem. Bohužel Sophos a Kernel&System co jsem koukal jesou nejvíc vytěžující procesy onoho PC.

Pokud není vidět nějaký nežádoucí proces a tím pádem by se dalo vyloučit napadení nějakým šmejdem předpokládám i možnou HW chybu.

Chtěl jsem proto konzultaci ohledně napadení.

Aktuální problémy jsou zamrznutí u přihlášených stránek při přechodu do jiné aplikace a návrat, kdy je potřeba znovu načíst danou stránku a znovu zalogovat.



Díky

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15192
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu - zpomalení PC

#4 Příspěvek od JaRon »

preventivne prescanuj s ADWCleanerom
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

veny
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 27 srp 2006 21:27

Re: Prosím o kontrolu - zpomalení PC

#5 Příspěvek od veny »

po delší době a s omluvou, nějak je toho moc :roll:
i po pročištění ADWCleanerem bez nálezů problémy přetrvávaly, chyba byla HW rázu, proběhla výměna MB a vše je zase OK
děkuju mnohokráte

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15192
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu - zpomalení PC

#6 Příspěvek od JaRon »

Zamalicko :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno