Dobrý den, můžu poprosit o kontrolu i tohoto zařízení? Velmi dlouhé odezvy a zamrzávání při spuštění aplikací a internetu.
Příspěvek samozřejmost.
aLogfile of random's system information tool 1.10 (written by random/random)
Run by PB at 2018-05-16 08:42:23
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 235 GB (82%) free of 287 GB
Total RAM: 2807 MB (24% free)
a
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:44:15, on 16.5.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\trend micro\PB.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10127 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges -Reinvoke
"c:\Program Files\Microsoft Security Client\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdate
\??\C:\Windows\system32\conhost.exe "-313411578-871464520-638417776-1738449861897565552-1008565183829412125284094069
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\wuauclt.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {15AC1EF7-2041-4302-A03C-A609F4B275C1}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
taskeng.exe {786ACC2C-5E82-4B5F-B960-8790B0FDBAE7}
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
\??\C:\Windows\system32\conhost.exe "1907858377-1822919010146968489976265360-1106688733825970847-1815331199673913249
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler
C:\Windows\system32\sppsvc.exe
"C:\Users\PB\Downloads\RSITx64 (2).exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
=========Mozilla firefox=========
ProfilePath - C:\Users\PB\AppData\Roaming\Mozilla\Firefox\Profiles\zpb659pn.default
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.140 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_140.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.140 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_140.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-23 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-23 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-23 415256]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]
"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-01-05 860040]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 1331288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-04-12 18334528]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_Plugin.exe [2018-05-01 1366528]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-29 263936]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
C:\Users\PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 2.4.lnk - C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-07-20 271360]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-05-16 08:42:33 ----D---- C:\Program Files\trend micro
2018-05-16 08:42:22 ----D---- C:\rsit
2018-05-16 07:18:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2018-05-16 07:18:47 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2018-05-01 11:27:44 ----D---- C:\Program Files (x86)\Microsoft Works
2018-05-01 11:18:38 ----D---- C:\Program Files\Microsoft Office
2018-05-01 11:17:09 ----D---- C:\ProgramData\Microsoft Help
2018-05-01 11:16:10 ----RHD---- C:\MSOCache
2018-05-01 10:40:52 ----D---- C:\Program Files\CCleaner
2018-05-01 10:40:02 ----D---- C:\Program Files\Google
2018-05-01 10:39:30 ----D---- C:\Program Files (x86)\Google
2018-05-01 10:28:49 ----D---- C:\Users\PB\AppData\Roaming\Mozilla
2018-05-01 10:28:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-01 10:28:17 ----D---- C:\Program Files\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2018-05-16 08:44:18 ----D---- C:\Windows\Temp
2018-05-16 08:42:33 ----RD---- C:\Program Files
2018-05-16 08:34:20 ----D---- C:\Windows\system32\catroot
2018-05-16 08:34:16 ----D---- C:\Windows\system32\catroot2
2018-05-16 08:31:57 ----D---- C:\Windows\winsxs
2018-05-16 08:26:10 ----D---- C:\Windows\Microsoft.NET
2018-05-16 08:25:13 ----RSD---- C:\Windows\assembly
2018-05-16 08:05:41 ----D---- C:\Windows\system32\LogFiles
2018-05-16 07:49:59 ----D---- C:\Windows\System32
2018-05-16 07:49:58 ----D---- C:\Windows\inf
2018-05-16 07:49:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-05-16 07:45:13 ----D---- C:\Users\PB\AppData\Roaming\OpenOffice.org2
2018-05-16 07:43:49 ----A---- C:\Windows\SYSWOW64\log.txt
2018-05-16 07:43:48 ----D---- C:\Windows\system32\config
2018-05-16 07:24:11 ----SHD---- C:\Windows\Installer
2018-05-16 07:22:09 ----D---- C:\Windows\SysWOW64
2018-05-16 07:22:04 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-05-16 07:21:50 ----D---- C:\Windows\system32\Macromed
2018-05-16 07:21:48 ----D---- C:\Windows\SYSWOW64\Macromed
2018-05-16 07:17:51 ----SHD---- C:\System Volume Information
2018-05-16 07:15:02 ----D---- C:\Windows
2018-05-01 11:55:47 ----D---- C:\Windows\system32\Tasks
2018-05-01 11:37:21 ----SD---- C:\Users\PB\AppData\Roaming\Microsoft
2018-05-01 11:33:30 ----RD---- C:\Program Files (x86)
2018-05-01 11:32:37 ----D---- C:\Windows\Tasks
2018-05-01 11:27:08 ----D---- C:\Program Files (x86)\Microsoft Office
2018-05-01 11:26:58 ----D---- C:\Program Files (x86)\Common Files
2018-05-01 11:26:03 ----RSD---- C:\Windows\Fonts
2018-05-01 11:25:39 ----SD---- C:\ProgramData\Microsoft
2018-05-01 11:25:39 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-01 11:22:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2018-05-01 11:18:24 ----D---- C:\Windows\ShellNew
2018-05-01 11:17:09 ----HD---- C:\ProgramData
2018-05-01 10:58:56 ----D---- C:\Windows\Panther
2018-05-01 10:58:48 ----D---- C:\Windows\Logs
2018-05-01 10:58:47 ----D---- C:\Windows\debug
2018-05-01 10:58:46 ----D---- C:\Windows\Minidump
2018-05-01 10:49:09 ----D---- C:\Program Files (x86)\Packard Bell Games
2018-05-01 10:46:25 ----D---- C:\ProgramData\Skype
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-04-13 540696]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 269008]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 125584]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-02 2750464]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-07-20 10603904]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-06-21 287232]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-09-22 243712]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-01-05 867712]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-18 268824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 23784]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-29 255744]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 368624]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-16 272384]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-12-17 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-04-28 194512]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-05 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
zamrzávání - dlouhé odezvy
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zamrzávání - dlouhé odezvy
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: zamrzávání - dlouhé odezvy
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-05-14.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 05-16-2018
# Duration: 00:00:20
# OS: Windows 7 Home Premium
# Scanned: 40858
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-05-14.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 05-16-2018
# Duration: 00:00:20
# OS: Windows 7 Home Premium
# Scanned: 40858
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zamrzávání - dlouhé odezvy
Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: zamrzávání - dlouhé odezvy
Logfile of random's system information tool 1.10 (written by random/random)
Run by PB at 2018-05-16 15:10:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 229 GB (80%) free of 287 GB
Total RAM: 2807 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:10:27, on 16.5.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\trend micro\PB.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9937 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"
taskeng.exe {807ADA58-D739-43D0-AAC7-5EA06BA8AED0}
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
taskeng.exe {766226DE-5E3C-476A-8613-DAC0D22FD623}
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\PB\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
=========Mozilla firefox=========
ProfilePath - C:\Users\PB\AppData\Roaming\Mozilla\Firefox\Profiles\zpb659pn.default
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]
"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-01-05 860040]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-10 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-10 392984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-10 417560]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-04-12 18334528]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-29 263936]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
C:\Users\PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 2.4.lnk - C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-10 390656]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-05-16 15:10:19 ----D---- C:\rsit
2018-05-16 15:05:44 ----D---- C:\_OTM
2018-05-16 11:35:27 ----D---- C:\AdwCleaner
2018-05-16 11:31:45 ----D---- C:\ProgramData\Intel
2018-05-16 11:27:17 ----D---- C:\Windows\system32\appraiser
2018-05-16 10:33:57 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2018-05-16 10:33:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2018-05-16 10:33:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2018-05-16 10:33:56 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\wksprtPS.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\wksprt.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\TSWbPrxy.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\tsgqec.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\rdvidcrl.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\mstscax.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\mstsc.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2018-05-16 10:26:28 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2018-05-16 10:26:27 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2018-05-16 10:26:27 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2018-05-16 10:26:26 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpudd.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpendp_winip.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpcorets.dll
2018-05-16 10:16:22 ----A---- C:\Windows\system32\nlasvc.dll
2018-05-16 10:16:21 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2018-05-16 10:16:21 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2018-05-16 09:44:08 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-05-16 09:42:32 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 09:42:32 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 09:29:35 ----A---- C:\Windows\SYSWOW64\wdi.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\wdi.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\powertracker.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\perftrack.dll
2018-05-16 09:28:15 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2018-05-16 09:28:15 ----A---- C:\Windows\system32\ubpm.dll
2018-05-16 09:19:43 ----A---- C:\Windows\system32\icaapi.dll
2018-05-16 09:19:43 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\kbdgeoqw.dll
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\KBDAZEL.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\KBDAZE.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\system32\nlsbres.dll
2018-05-16 09:19:17 ----A---- C:\Windows\system32\kbdgeoqw.dll
2018-05-16 09:19:17 ----A---- C:\Windows\system32\KBDAZEL.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\system32\KBDAZE.DLL
2018-05-16 09:18:33 ----A---- C:\Windows\system32\drivers\disk.sys
2018-05-16 09:07:30 ----A---- C:\Windows\system32\sysmain.dll
2018-05-16 09:07:30 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2018-05-16 09:07:29 ----A---- C:\Windows\system32\msmmsp.dll
2018-05-16 09:04:41 ----A---- C:\Windows\system32\UtcResources.dll
2018-05-16 09:04:41 ----A---- C:\Windows\system32\diagtrack.dll
2018-05-16 09:04:39 ----A---- C:\Windows\system32\tdh.dll
2018-05-16 09:04:37 ----A---- C:\Windows\SYSWOW64\tdh.dll
2018-05-16 09:03:38 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2018-05-16 09:03:38 ----A---- C:\Windows\system32\tracerpt.exe
2018-05-16 09:03:38 ----A---- C:\Windows\system32\sechost.dll
2018-05-16 09:03:38 ----A---- C:\Windows\system32\logman.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\sechost.dll
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\relog.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\logman.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\typeperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\relog.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\diskperf.exe
2018-05-16 09:03:10 ----A---- C:\Windows\SYSWOW64\cewmdm.dll
2018-05-16 09:03:10 ----A---- C:\Windows\system32\drivers\rmcast.sys
2018-05-16 09:03:10 ----A---- C:\Windows\system32\cewmdm.dll
2018-05-16 09:03:09 ----A---- C:\Windows\SYSWOW64\wshrm.dll
2018-05-16 09:03:09 ----A---- C:\Windows\system32\wshrm.dll
2018-05-16 09:03:00 ----A---- C:\Windows\system32\basesrv.dll
2018-05-16 09:02:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-05-16 09:02:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-05-16 09:02:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-05-16 09:02:23 ----A---- C:\Windows\system32\rpcrt4.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\ntdll.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\lsasrv.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\kerberos.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\winresume.exe
2018-05-16 09:02:22 ----A---- C:\Windows\system32\winload.exe
2018-05-16 09:02:22 ----A---- C:\Windows\system32\schannel.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\msv1_0.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\KernelBase.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\kernel32.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-05-16 09:02:22 ----A---- C:\Windows\system32\ci.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\advapi32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\wow64win.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\winsrv.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\rpchttp.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\ncrypt.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\cng.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\certcli.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-05-16 09:02:21 ----A---- C:\Windows\system32\adtschema.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\wow64.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\wdigest.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\TSpkg.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\srcore.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\mtxoci.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-05-16 09:02:20 ----A---- C:\Windows\system32\conhost.exe
2018-05-16 09:02:20 ----A---- C:\Windows\system32\bcryptprimitives.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\appidsvc.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\wow64cpu.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\sspisrv.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\sspicli.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\srclient.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\smss.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\secur32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\rstrui.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\ntvdm64.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\msaudite.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\lsass.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\drivers\appid.sys
2018-05-16 09:02:19 ----A---- C:\Windows\system32\csrsrv.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\cryptbase.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\credssp.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\auditpol.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\appidapi.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\user.exe
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-05-16 09:02:18 ----A---- C:\Windows\system32\msobjs.dll
2018-05-16 09:02:18 ----A---- C:\Windows\system32\apisetschema.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\invagent.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-05-16 09:01:16 ----A---- C:\Windows\system32\centel.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\aitstatic.exe
2018-05-16 09:01:15 ----A---- C:\Windows\system32\generaltel.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\devinv.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\appraiser.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\aepic.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\aeinv.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\acmigration.dll
2018-05-16 09:01:10 ----A---- C:\Windows\system32\services.exe
2018-05-16 09:01:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2018-05-16 09:01:03 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-05-16 09:01:02 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2018-05-16 09:01:02 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\INETRES.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\inetcomm.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\srv.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\netio.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-05-16 09:01:00 ----A---- C:\Windows\system32\schedsvc.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wups.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2018-05-16 09:00:41 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuwebv.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wups2.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wups.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wudriver.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wucltux.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuaueng.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuauclt.exe
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuapp.exe
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuapi.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-05-16 09:00:25 ----A---- C:\Windows\system32\profsvc.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\fixmapi.exe
2018-05-16 09:00:24 ----A---- C:\Windows\system32\mapistub.dll
2018-05-16 09:00:24 ----A---- C:\Windows\system32\mapi32.dll
2018-05-16 09:00:24 ----A---- C:\Windows\system32\fixmapi.exe
2018-05-16 09:00:22 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2018-05-16 09:00:22 ----A---- C:\Windows\system32\dwmcore.dll
2018-05-16 09:00:22 ----A---- C:\Windows\system32\dwmapi.dll
2018-05-16 09:00:21 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2018-05-16 09:00:16 ----A---- C:\Windows\SYSWOW64\tbs.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\tbs.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\fveapibase.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\fveapi.dll
2018-05-16 09:00:00 ----A---- C:\Windows\system32\wpdshext.dll
2018-05-16 08:59:59 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2018-05-16 08:59:56 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2018-05-16 08:59:56 ----A---- C:\Windows\system32\comctl32.dll
2018-05-16 08:59:55 ----A---- C:\Windows\system32\comsvcs.dll
2018-05-16 08:59:54 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2018-05-16 08:59:54 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2018-05-16 08:59:54 ----A---- C:\Windows\system32\catsrvut.dll
2018-05-16 08:59:49 ----A---- C:\Windows\SYSWOW64\mfds.dll
2018-05-16 08:59:49 ----A---- C:\Windows\system32\mfds.dll
2018-05-16 08:59:48 ----A---- C:\Windows\system32\drivers\tdx.sys
2018-05-16 08:59:48 ----A---- C:\Windows\system32\drivers\afd.sys
2018-05-16 08:59:47 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2018-05-16 08:59:47 ----A---- C:\Windows\system32\FntCache.dll
2018-05-16 08:59:47 ----A---- C:\Windows\system32\DWrite.dll
2018-05-16 08:59:46 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-05-16 08:59:46 ----A---- C:\Windows\system32\win32k.sys
2018-05-16 08:59:46 ----A---- C:\Windows\system32\atmfd.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\lpk.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\fontsub.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\dciman32.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\d3d10warp.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\atmlib.dll
2018-05-16 08:59:43 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-05-16 08:59:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2018-05-16 08:59:42 ----A---- C:\Windows\system32\WMPhoto.dll
2018-05-16 08:42:33 ----D---- C:\Program Files\trend micro
2018-05-16 08:02:24 ----A---- C:\Windows\SYSWOW64\notepad.exe
2018-05-16 08:02:24 ----A---- C:\Windows\system32\notepad.exe
2018-05-16 08:02:24 ----A---- C:\Windows\notepad.exe
2018-05-16 08:01:13 ----A---- C:\Windows\system32\drivers\stream.sys
2018-05-16 07:58:50 ----A---- C:\Windows\system32\shell32.dll
2018-05-16 07:58:49 ----A---- C:\Windows\SYSWOW64\shell32.dll
2018-05-16 07:58:47 ----A---- C:\Windows\SYSWOW64\explorer.exe
2018-05-16 07:58:47 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-05-16 07:58:47 ----A---- C:\Windows\system32\authui.dll
2018-05-16 07:58:47 ----A---- C:\Windows\explorer.exe
2018-05-16 07:58:46 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2018-05-16 07:58:46 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-05-16 07:58:34 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2018-05-16 07:58:34 ----A---- C:\Windows\system32\d3d10level9.dll
2018-05-16 07:58:33 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2018-05-16 07:58:33 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-05-16 07:58:31 ----A---- C:\Windows\SYSWOW64\qedit.dll
2018-05-16 07:58:31 ----A---- C:\Windows\system32\qedit.dll
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\shimeng.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\sdbinst.exe
2018-05-16 07:58:27 ----A---- C:\Windows\system32\apphelp.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\aelupsvc.dll
2018-05-16 07:58:21 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2018-05-16 07:58:21 ----A---- C:\Windows\system32\pku2u.dll
2018-05-16 07:58:03 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\SYSWOW64\msmpeg2adec.dll
2018-05-16 07:58:03 ----A---- C:\Windows\system32\WMVDECOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\system32\WMADMOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\system32\msmpeg2adec.dll
2018-05-16 07:58:03 ----A---- C:\Windows\system32\mf.dll
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\mf.dll
2018-05-16 07:58:02 ----A---- C:\Windows\system32\WMVSDECD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\system32\WMADMOE.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\SYSWOW64\WMADMOE.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\SYSWOW64\evr.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\WMVENCOD.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\system32\wmpmde.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\quartz.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\mcmde.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\evr.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\WMVENCOD.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\quartz.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\COLORCNV.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\WMVXENCD.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\mfplat.dll
2018-05-16 07:57:58 ----A---- C:\Windows\system32\COLORCNV.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\SYSWOW64\WMVXENCD.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\SYSWOW64\devenum.dll
2018-05-16 07:57:57 ----A---- C:\Windows\system32\WMVSENCD.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2018-05-16 07:57:57 ----A---- C:\Windows\system32\VIDRESZR.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\system32\MFWMAAEC.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\WMVSENCD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MPG4DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MP43DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MFWMAAEC.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MPG4DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP4SDECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP43DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP3DMOD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\devenum.dll
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\WMSPDMOE.DLL
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\VIDRESZR.DLL
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\qasf.dll
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\SysFxUI.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\qdvd.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\qasf.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\mfvdsp.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\RESAMPLEDMO.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\MP4SDECD.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\MP3DMOD.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfvdsp.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfps.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2018-05-16 07:57:54 ----A---- C:\Windows\system32\rrinstaller.exe
2018-05-16 07:57:54 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2018-05-16 07:57:54 ----A---- C:\Windows\system32\mfps.dll
2018-05-16 07:57:54 ----A---- C:\Windows\system32\mfpmp.exe
2018-05-16 07:57:53 ----A---- C:\Windows\SYSWOW64\mferror.dll
2018-05-16 07:57:53 ----A---- C:\Windows\SYSWOW64\ksuser.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\mferror.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\ksuser.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\portcls.sys
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\drmk.sys
2018-05-16 07:57:47 ----A---- C:\Windows\system32\seclogon.dll
2018-05-16 07:57:36 ----A---- C:\Windows\system32\EncDec.dll
2018-05-16 07:57:36 ----A---- C:\Windows\system32\CPFilters.dll
2018-05-16 07:57:33 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2018-05-16 07:57:32 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2018-05-16 07:55:50 ----A---- C:\Windows\system32\IPSECSVC.DLL
2018-05-16 07:55:50 ----A---- C:\Windows\system32\gpsvc.dll
2018-05-16 07:55:49 ----A---- C:\Windows\SYSWOW64\polstore.dll
2018-05-16 07:55:49 ----A---- C:\Windows\system32\polstore.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\winipsec.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\gpapi.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2018-05-16 07:55:29 ----A---- C:\Windows\system32\scesrv.dll
2018-05-16 07:55:28 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-05-16 07:55:25 ----A---- C:\Windows\system32\msxml3.dll
2018-05-16 07:55:24 ----A---- C:\Windows\system32\msxml6.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2018-05-16 07:55:23 ----A---- C:\Windows\system32\msxml6r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\system32\msxml3r.dll
2018-05-16 07:55:19 ----A---- C:\Windows\SYSWOW64\charmap.exe
2018-05-16 07:55:19 ----A---- C:\Windows\system32\charmap.exe
2018-05-16 07:55:16 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\ws2_32.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\winhttp.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\mswsock.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\drivers\netbt.sys
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2018-05-16 07:55:14 ----A---- C:\Windows\system32\netbtugc.exe
2018-05-16 07:53:24 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-05-16 07:53:20 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2018-05-16 07:53:20 ----A---- C:\Windows\system32\InkEd.dll
2018-05-16 07:53:18 ----A---- C:\Windows\system32\webio.dll
2018-05-16 07:53:17 ----A---- C:\Windows\SYSWOW64\webio.dll
2018-05-16 07:53:16 ----A---- C:\Windows\SYSWOW64\els.dll
2018-05-16 07:53:16 ----A---- C:\Windows\system32\els.dll
2018-05-16 07:53:14 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2018-05-16 07:53:14 ----A---- C:\Windows\system32\clfsw32.dll
2018-05-16 07:53:14 ----A---- C:\Windows\system32\clfs.sys
2018-05-16 07:52:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2018-05-16 07:52:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2018-05-16 07:18:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2018-05-16 07:18:47 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2018-05-01 11:27:44 ----D---- C:\Program Files (x86)\Microsoft Works
2018-05-01 11:18:38 ----D---- C:\Program Files\Microsoft Office
2018-05-01 11:17:09 ----D---- C:\ProgramData\Microsoft Help
2018-05-01 11:16:10 ----RHD---- C:\MSOCache
2018-05-01 10:40:52 ----D---- C:\Program Files\CCleaner
2018-05-01 10:40:02 ----D---- C:\Program Files\Google
2018-05-01 10:39:30 ----D---- C:\Program Files (x86)\Google
2018-05-01 10:28:49 ----D---- C:\Users\PB\AppData\Roaming\Mozilla
2018-05-01 10:28:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-01 10:28:17 ----D---- C:\Program Files\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2018-05-16 15:10:06 ----D---- C:\Windows\Temp
2018-05-16 15:08:45 ----D---- C:\Users\PB\AppData\Roaming\OpenOffice.org2
2018-05-16 15:07:35 ----A---- C:\Windows\SYSWOW64\log.txt
2018-05-16 15:06:37 ----D---- C:\Windows\system32\config
2018-05-16 14:53:31 ----D---- C:\Windows\System32
2018-05-16 14:53:31 ----D---- C:\Windows\inf
2018-05-16 14:53:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-05-16 14:29:50 ----D---- C:\Windows\system32\catroot2
2018-05-16 14:29:50 ----D---- C:\Windows\system32\catroot
2018-05-16 14:29:49 ----D---- C:\Windows\winsxs
2018-05-16 11:45:38 ----SHD---- C:\Windows\Installer
2018-05-16 11:45:04 ----D---- C:\Windows\SysWOW64
2018-05-16 11:31:45 ----HD---- C:\ProgramData
2018-05-16 11:31:28 ----D---- C:\Windows
2018-05-16 11:27:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-05-16 11:27:23 ----D---- C:\Windows\system32\en-US
2018-05-16 11:27:23 ----D---- C:\Windows\system32\drivers
2018-05-16 11:27:23 ----D---- C:\Windows\system32\cs-CZ
2018-05-16 11:27:21 ----D---- C:\Windows\system32\CodeIntegrity
2018-05-16 11:27:21 ----D---- C:\Windows\system32\Boot
2018-05-16 11:27:21 ----D---- C:\Windows\AppPatch
2018-05-16 11:27:20 ----D---- C:\Windows\SYSWOW64\wbem
2018-05-16 11:27:20 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-05-16 11:27:19 ----D---- C:\Windows\system32\wbem
2018-05-16 11:27:19 ----D---- C:\Windows\system32\drivers\en-US
2018-05-16 11:27:19 ----D---- C:\Windows\system32\AdvancedInstallers
2018-05-16 11:27:18 ----D---- C:\Windows\tracing
2018-05-16 11:27:18 ----D---- C:\Windows\PolicyDefinitions
2018-05-16 11:27:17 ----SD---- C:\Windows\system32\CompatTel
2018-05-16 11:27:17 ----D---- C:\Windows\Logs
2018-05-16 11:27:17 ----D---- C:\Windows\AppCompat
2018-05-16 11:27:16 ----D---- C:\Windows\SYSWOW64\en-US
2018-05-16 11:27:14 ----SD---- C:\ProgramData\Microsoft
2018-05-16 11:27:13 ----RSD---- C:\Windows\Fonts
2018-05-16 11:26:33 ----D---- C:\Windows\system32\DriverStore
2018-05-16 11:24:05 ----SHD---- C:\System Volume Information
2018-05-16 10:29:18 ----D---- C:\Program Files (x86)\Intel
2018-05-16 10:27:38 ----D---- C:\Windows\Microsoft.NET
2018-05-16 10:18:27 ----RSD---- C:\Windows\assembly
2018-05-16 09:52:12 ----D---- C:\Windows\ShellNew
2018-05-16 09:52:11 ----RD---- C:\Program Files
2018-05-16 09:52:07 ----D---- C:\Windows\ehome
2018-05-16 09:51:36 ----D---- C:\Windows\system32\migration
2018-05-16 09:44:29 ----D---- C:\Windows\system32\MRT
2018-05-16 09:44:29 ----D---- C:\Windows\debug
2018-05-16 09:43:23 ----AC---- C:\Windows\system32\MRT.exe
2018-05-16 09:42:14 ----D---- C:\Program Files\Microsoft Security Client
2018-05-16 09:41:42 ----D---- C:\Program Files (x86)\Microsoft Security Client
2018-05-16 09:40:16 ----D---- C:\Program Files\Microsoft Silverlight
2018-05-16 09:40:16 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2018-05-16 09:30:04 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-05-16 08:49:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-05-16 08:49:37 ----D---- C:\Windows\system32\Macromed
2018-05-16 08:49:34 ----D---- C:\Windows\SYSWOW64\Macromed
2018-05-16 08:05:41 ----D---- C:\Windows\system32\LogFiles
2018-05-01 11:55:47 ----D---- C:\Windows\system32\Tasks
2018-05-01 11:37:21 ----SD---- C:\Users\PB\AppData\Roaming\Microsoft
2018-05-01 11:33:30 ----RD---- C:\Program Files (x86)
2018-05-01 11:32:37 ----D---- C:\Windows\Tasks
2018-05-01 11:27:08 ----D---- C:\Program Files (x86)\Microsoft Office
2018-05-01 11:26:58 ----D---- C:\Program Files (x86)\Common Files
2018-05-01 11:25:39 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-01 11:22:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2018-05-01 10:58:56 ----D---- C:\Windows\Panther
2018-05-01 10:58:46 ----D---- C:\Windows\Minidump
2018-05-01 10:49:09 ----D---- C:\Program Files (x86)\Packard Bell Games
2018-05-01 10:47:11 ----D---- C:\ProgramData\Skype
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-04-13 540696]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-02 2750464]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-10 12311904]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-06-21 287232]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-09-22 243712]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-01-05 867712]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-18 268824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-29 255744]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-16 272384]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-12-17 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-04-28 194512]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-05 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Run by PB at 2018-05-16 15:10:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 229 GB (80%) free of 287 GB
Total RAM: 2807 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:10:27, on 16.5.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\trend micro\PB.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9937 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"
taskeng.exe {807ADA58-D739-43D0-AAC7-5EA06BA8AED0}
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.exe" -quickstart
taskeng.exe {766226DE-5E3C-476A-8613-DAC0D22FD623}
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\PB\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
=========Mozilla firefox=========
ProfilePath - C:\Users\PB\AppData\Roaming\Mozilla\Firefox\Profiles\zpb659pn.default
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-22 10920552]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]
"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-01-05 860040]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-10 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-10 392984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-10 417560]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-04-12 18334528]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-29 263936]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
C:\Users\PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 2.4.lnk - C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-10 390656]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-05-16 15:10:19 ----D---- C:\rsit
2018-05-16 15:05:44 ----D---- C:\_OTM
2018-05-16 11:35:27 ----D---- C:\AdwCleaner
2018-05-16 11:31:45 ----D---- C:\ProgramData\Intel
2018-05-16 11:27:17 ----D---- C:\Windows\system32\appraiser
2018-05-16 10:33:57 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2018-05-16 10:33:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2018-05-16 10:33:56 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2018-05-16 10:33:56 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2018-05-16 10:33:55 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\wksprtPS.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\wksprt.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\TSWbPrxy.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\tsgqec.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\rdvidcrl.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\mstscax.dll
2018-05-16 10:33:55 ----A---- C:\Windows\system32\mstsc.exe
2018-05-16 10:33:55 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2018-05-16 10:26:28 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2018-05-16 10:26:27 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2018-05-16 10:26:27 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2018-05-16 10:26:26 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpudd.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpendp_winip.dll
2018-05-16 10:26:26 ----A---- C:\Windows\system32\rdpcorets.dll
2018-05-16 10:16:22 ----A---- C:\Windows\system32\nlasvc.dll
2018-05-16 10:16:21 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2018-05-16 10:16:21 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2018-05-16 09:44:08 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-05-16 09:42:32 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 09:42:32 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 09:29:35 ----A---- C:\Windows\SYSWOW64\wdi.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\wdi.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\powertracker.dll
2018-05-16 09:29:35 ----A---- C:\Windows\system32\perftrack.dll
2018-05-16 09:28:15 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2018-05-16 09:28:15 ----A---- C:\Windows\system32\ubpm.dll
2018-05-16 09:19:43 ----A---- C:\Windows\system32\icaapi.dll
2018-05-16 09:19:43 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\kbdgeoqw.dll
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\KBDAZEL.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\SYSWOW64\KBDAZE.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\system32\nlsbres.dll
2018-05-16 09:19:17 ----A---- C:\Windows\system32\kbdgeoqw.dll
2018-05-16 09:19:17 ----A---- C:\Windows\system32\KBDAZEL.DLL
2018-05-16 09:19:17 ----A---- C:\Windows\system32\KBDAZE.DLL
2018-05-16 09:18:33 ----A---- C:\Windows\system32\drivers\disk.sys
2018-05-16 09:07:30 ----A---- C:\Windows\system32\sysmain.dll
2018-05-16 09:07:30 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2018-05-16 09:07:29 ----A---- C:\Windows\system32\msmmsp.dll
2018-05-16 09:04:41 ----A---- C:\Windows\system32\UtcResources.dll
2018-05-16 09:04:41 ----A---- C:\Windows\system32\diagtrack.dll
2018-05-16 09:04:39 ----A---- C:\Windows\system32\tdh.dll
2018-05-16 09:04:37 ----A---- C:\Windows\SYSWOW64\tdh.dll
2018-05-16 09:03:38 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2018-05-16 09:03:38 ----A---- C:\Windows\system32\tracerpt.exe
2018-05-16 09:03:38 ----A---- C:\Windows\system32\sechost.dll
2018-05-16 09:03:38 ----A---- C:\Windows\system32\logman.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\sechost.dll
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\relog.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\logman.exe
2018-05-16 09:03:37 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\typeperf.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\relog.exe
2018-05-16 09:03:37 ----A---- C:\Windows\system32\diskperf.exe
2018-05-16 09:03:10 ----A---- C:\Windows\SYSWOW64\cewmdm.dll
2018-05-16 09:03:10 ----A---- C:\Windows\system32\drivers\rmcast.sys
2018-05-16 09:03:10 ----A---- C:\Windows\system32\cewmdm.dll
2018-05-16 09:03:09 ----A---- C:\Windows\SYSWOW64\wshrm.dll
2018-05-16 09:03:09 ----A---- C:\Windows\system32\wshrm.dll
2018-05-16 09:03:00 ----A---- C:\Windows\system32\basesrv.dll
2018-05-16 09:02:24 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-05-16 09:02:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-05-16 09:02:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-05-16 09:02:23 ----A---- C:\Windows\system32\rpcrt4.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\ntdll.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\lsasrv.dll
2018-05-16 09:02:23 ----A---- C:\Windows\system32\kerberos.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-05-16 09:02:22 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\winresume.exe
2018-05-16 09:02:22 ----A---- C:\Windows\system32\winload.exe
2018-05-16 09:02:22 ----A---- C:\Windows\system32\schannel.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\msv1_0.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\KernelBase.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\kernel32.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-05-16 09:02:22 ----A---- C:\Windows\system32\ci.dll
2018-05-16 09:02:22 ----A---- C:\Windows\system32\advapi32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-05-16 09:02:21 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\wow64win.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\winsrv.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\rpchttp.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\ncrypt.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\drivers\cng.sys
2018-05-16 09:02:21 ----A---- C:\Windows\system32\certcli.dll
2018-05-16 09:02:21 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-05-16 09:02:21 ----A---- C:\Windows\system32\adtschema.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-05-16 09:02:20 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\wow64.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\wdigest.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\TSpkg.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\srcore.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\mtxoci.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-05-16 09:02:20 ----A---- C:\Windows\system32\conhost.exe
2018-05-16 09:02:20 ----A---- C:\Windows\system32\bcryptprimitives.dll
2018-05-16 09:02:20 ----A---- C:\Windows\system32\appidsvc.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-16 09:02:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-05-16 09:02:19 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\wow64cpu.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\sspisrv.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\sspicli.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\srclient.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\smss.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\secur32.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\rstrui.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\ntvdm64.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\msaudite.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\lsass.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\drivers\appid.sys
2018-05-16 09:02:19 ----A---- C:\Windows\system32\csrsrv.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\cryptbase.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\credssp.dll
2018-05-16 09:02:19 ----A---- C:\Windows\system32\auditpol.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-05-16 09:02:19 ----A---- C:\Windows\system32\appidapi.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-16 09:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\user.exe
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-05-16 09:02:18 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-05-16 09:02:18 ----A---- C:\Windows\system32\msobjs.dll
2018-05-16 09:02:18 ----A---- C:\Windows\system32\apisetschema.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\invagent.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-05-16 09:01:16 ----A---- C:\Windows\system32\centel.dll
2018-05-16 09:01:16 ----A---- C:\Windows\system32\aitstatic.exe
2018-05-16 09:01:15 ----A---- C:\Windows\system32\generaltel.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\devinv.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\appraiser.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\aepic.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\aeinv.dll
2018-05-16 09:01:15 ----A---- C:\Windows\system32\acmigration.dll
2018-05-16 09:01:10 ----A---- C:\Windows\system32\services.exe
2018-05-16 09:01:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2018-05-16 09:01:03 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-05-16 09:01:02 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2018-05-16 09:01:02 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\INETRES.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\inetcomm.dll
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\srv.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\netio.sys
2018-05-16 09:01:02 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-05-16 09:01:00 ----A---- C:\Windows\system32\schedsvc.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wups.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2018-05-16 09:00:42 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2018-05-16 09:00:41 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuwebv.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wups2.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wups.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wudriver.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wucltux.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuaueng.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuauclt.exe
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuapp.exe
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wuapi.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-05-16 09:00:41 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-05-16 09:00:25 ----A---- C:\Windows\system32\profsvc.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2018-05-16 09:00:24 ----A---- C:\Windows\SYSWOW64\fixmapi.exe
2018-05-16 09:00:24 ----A---- C:\Windows\system32\mapistub.dll
2018-05-16 09:00:24 ----A---- C:\Windows\system32\mapi32.dll
2018-05-16 09:00:24 ----A---- C:\Windows\system32\fixmapi.exe
2018-05-16 09:00:22 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2018-05-16 09:00:22 ----A---- C:\Windows\system32\dwmcore.dll
2018-05-16 09:00:22 ----A---- C:\Windows\system32\dwmapi.dll
2018-05-16 09:00:21 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2018-05-16 09:00:16 ----A---- C:\Windows\SYSWOW64\tbs.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\tbs.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\fveapibase.dll
2018-05-16 09:00:16 ----A---- C:\Windows\system32\fveapi.dll
2018-05-16 09:00:00 ----A---- C:\Windows\system32\wpdshext.dll
2018-05-16 08:59:59 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2018-05-16 08:59:56 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2018-05-16 08:59:56 ----A---- C:\Windows\system32\comctl32.dll
2018-05-16 08:59:55 ----A---- C:\Windows\system32\comsvcs.dll
2018-05-16 08:59:54 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2018-05-16 08:59:54 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2018-05-16 08:59:54 ----A---- C:\Windows\system32\catsrvut.dll
2018-05-16 08:59:49 ----A---- C:\Windows\SYSWOW64\mfds.dll
2018-05-16 08:59:49 ----A---- C:\Windows\system32\mfds.dll
2018-05-16 08:59:48 ----A---- C:\Windows\system32\drivers\tdx.sys
2018-05-16 08:59:48 ----A---- C:\Windows\system32\drivers\afd.sys
2018-05-16 08:59:47 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2018-05-16 08:59:47 ----A---- C:\Windows\system32\FntCache.dll
2018-05-16 08:59:47 ----A---- C:\Windows\system32\DWrite.dll
2018-05-16 08:59:46 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-05-16 08:59:46 ----A---- C:\Windows\system32\win32k.sys
2018-05-16 08:59:46 ----A---- C:\Windows\system32\atmfd.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2018-05-16 08:59:44 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\lpk.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\fontsub.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\dciman32.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\d3d10warp.dll
2018-05-16 08:59:44 ----A---- C:\Windows\system32\atmlib.dll
2018-05-16 08:59:43 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-05-16 08:59:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2018-05-16 08:59:42 ----A---- C:\Windows\system32\WMPhoto.dll
2018-05-16 08:42:33 ----D---- C:\Program Files\trend micro
2018-05-16 08:02:24 ----A---- C:\Windows\SYSWOW64\notepad.exe
2018-05-16 08:02:24 ----A---- C:\Windows\system32\notepad.exe
2018-05-16 08:02:24 ----A---- C:\Windows\notepad.exe
2018-05-16 08:01:13 ----A---- C:\Windows\system32\drivers\stream.sys
2018-05-16 07:58:50 ----A---- C:\Windows\system32\shell32.dll
2018-05-16 07:58:49 ----A---- C:\Windows\SYSWOW64\shell32.dll
2018-05-16 07:58:47 ----A---- C:\Windows\SYSWOW64\explorer.exe
2018-05-16 07:58:47 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-05-16 07:58:47 ----A---- C:\Windows\system32\authui.dll
2018-05-16 07:58:47 ----A---- C:\Windows\explorer.exe
2018-05-16 07:58:46 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2018-05-16 07:58:46 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-05-16 07:58:34 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2018-05-16 07:58:34 ----A---- C:\Windows\system32\d3d10level9.dll
2018-05-16 07:58:33 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2018-05-16 07:58:33 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-05-16 07:58:31 ----A---- C:\Windows\SYSWOW64\qedit.dll
2018-05-16 07:58:31 ----A---- C:\Windows\system32\qedit.dll
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2018-05-16 07:58:27 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\shimeng.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\sdbinst.exe
2018-05-16 07:58:27 ----A---- C:\Windows\system32\apphelp.dll
2018-05-16 07:58:27 ----A---- C:\Windows\system32\aelupsvc.dll
2018-05-16 07:58:21 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2018-05-16 07:58:21 ----A---- C:\Windows\system32\pku2u.dll
2018-05-16 07:58:03 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\SYSWOW64\msmpeg2adec.dll
2018-05-16 07:58:03 ----A---- C:\Windows\system32\WMVDECOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\system32\WMADMOD.DLL
2018-05-16 07:58:03 ----A---- C:\Windows\system32\msmpeg2adec.dll
2018-05-16 07:58:03 ----A---- C:\Windows\system32\mf.dll
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\SYSWOW64\mf.dll
2018-05-16 07:58:02 ----A---- C:\Windows\system32\WMVSDECD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2018-05-16 07:58:02 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2018-05-16 07:58:01 ----A---- C:\Windows\system32\WMADMOE.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\SYSWOW64\WMADMOE.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\SYSWOW64\evr.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\WMVENCOD.DLL
2018-05-16 07:57:59 ----A---- C:\Windows\system32\wmpmde.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\quartz.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\mcmde.dll
2018-05-16 07:57:59 ----A---- C:\Windows\system32\evr.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\WMVENCOD.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\quartz.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2018-05-16 07:57:58 ----A---- C:\Windows\SYSWOW64\COLORCNV.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\WMVXENCD.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2018-05-16 07:57:58 ----A---- C:\Windows\system32\mfplat.dll
2018-05-16 07:57:58 ----A---- C:\Windows\system32\COLORCNV.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\SYSWOW64\WMVXENCD.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\SYSWOW64\devenum.dll
2018-05-16 07:57:57 ----A---- C:\Windows\system32\WMVSENCD.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2018-05-16 07:57:57 ----A---- C:\Windows\system32\VIDRESZR.DLL
2018-05-16 07:57:57 ----A---- C:\Windows\system32\MFWMAAEC.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\WMVSENCD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MPG4DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MP43DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\SYSWOW64\MFWMAAEC.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MPG4DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP4SDECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP43DECD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\MP3DMOD.DLL
2018-05-16 07:57:56 ----A---- C:\Windows\system32\devenum.dll
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\WMSPDMOE.DLL
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\VIDRESZR.DLL
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\qasf.dll
2018-05-16 07:57:55 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\SysFxUI.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\qdvd.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\qasf.dll
2018-05-16 07:57:55 ----A---- C:\Windows\system32\mfvdsp.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\RESAMPLEDMO.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\MP4SDECD.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\MP3DMOD.DLL
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfvdsp.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfps.dll
2018-05-16 07:57:54 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2018-05-16 07:57:54 ----A---- C:\Windows\system32\rrinstaller.exe
2018-05-16 07:57:54 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2018-05-16 07:57:54 ----A---- C:\Windows\system32\mfps.dll
2018-05-16 07:57:54 ----A---- C:\Windows\system32\mfpmp.exe
2018-05-16 07:57:53 ----A---- C:\Windows\SYSWOW64\mferror.dll
2018-05-16 07:57:53 ----A---- C:\Windows\SYSWOW64\ksuser.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\mferror.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\ksuser.dll
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\portcls.sys
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2018-05-16 07:57:53 ----A---- C:\Windows\system32\drivers\drmk.sys
2018-05-16 07:57:47 ----A---- C:\Windows\system32\seclogon.dll
2018-05-16 07:57:36 ----A---- C:\Windows\system32\EncDec.dll
2018-05-16 07:57:36 ----A---- C:\Windows\system32\CPFilters.dll
2018-05-16 07:57:33 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2018-05-16 07:57:32 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2018-05-16 07:55:50 ----A---- C:\Windows\system32\IPSECSVC.DLL
2018-05-16 07:55:50 ----A---- C:\Windows\system32\gpsvc.dll
2018-05-16 07:55:49 ----A---- C:\Windows\SYSWOW64\polstore.dll
2018-05-16 07:55:49 ----A---- C:\Windows\system32\polstore.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2018-05-16 07:55:47 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\winipsec.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\gpapi.dll
2018-05-16 07:55:47 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2018-05-16 07:55:29 ----A---- C:\Windows\system32\scesrv.dll
2018-05-16 07:55:28 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-05-16 07:55:25 ----A---- C:\Windows\system32\msxml3.dll
2018-05-16 07:55:24 ----A---- C:\Windows\system32\msxml6.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2018-05-16 07:55:23 ----A---- C:\Windows\system32\msxml6r.dll
2018-05-16 07:55:23 ----A---- C:\Windows\system32\msxml3r.dll
2018-05-16 07:55:19 ----A---- C:\Windows\SYSWOW64\charmap.exe
2018-05-16 07:55:19 ----A---- C:\Windows\system32\charmap.exe
2018-05-16 07:55:16 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\ws2_32.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\winhttp.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\mswsock.dll
2018-05-16 07:55:16 ----A---- C:\Windows\system32\drivers\netbt.sys
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2018-05-16 07:55:15 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2018-05-16 07:55:14 ----A---- C:\Windows\system32\netbtugc.exe
2018-05-16 07:53:24 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-05-16 07:53:20 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2018-05-16 07:53:20 ----A---- C:\Windows\system32\InkEd.dll
2018-05-16 07:53:18 ----A---- C:\Windows\system32\webio.dll
2018-05-16 07:53:17 ----A---- C:\Windows\SYSWOW64\webio.dll
2018-05-16 07:53:16 ----A---- C:\Windows\SYSWOW64\els.dll
2018-05-16 07:53:16 ----A---- C:\Windows\system32\els.dll
2018-05-16 07:53:14 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2018-05-16 07:53:14 ----A---- C:\Windows\system32\clfsw32.dll
2018-05-16 07:53:14 ----A---- C:\Windows\system32\clfs.sys
2018-05-16 07:52:10 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2018-05-16 07:52:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2018-05-16 07:18:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2018-05-16 07:18:47 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2018-05-01 11:27:44 ----D---- C:\Program Files (x86)\Microsoft Works
2018-05-01 11:18:38 ----D---- C:\Program Files\Microsoft Office
2018-05-01 11:17:09 ----D---- C:\ProgramData\Microsoft Help
2018-05-01 11:16:10 ----RHD---- C:\MSOCache
2018-05-01 10:40:52 ----D---- C:\Program Files\CCleaner
2018-05-01 10:40:02 ----D---- C:\Program Files\Google
2018-05-01 10:39:30 ----D---- C:\Program Files (x86)\Google
2018-05-01 10:28:49 ----D---- C:\Users\PB\AppData\Roaming\Mozilla
2018-05-01 10:28:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-01 10:28:17 ----D---- C:\Program Files\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2018-05-16 15:10:06 ----D---- C:\Windows\Temp
2018-05-16 15:08:45 ----D---- C:\Users\PB\AppData\Roaming\OpenOffice.org2
2018-05-16 15:07:35 ----A---- C:\Windows\SYSWOW64\log.txt
2018-05-16 15:06:37 ----D---- C:\Windows\system32\config
2018-05-16 14:53:31 ----D---- C:\Windows\System32
2018-05-16 14:53:31 ----D---- C:\Windows\inf
2018-05-16 14:53:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-05-16 14:29:50 ----D---- C:\Windows\system32\catroot2
2018-05-16 14:29:50 ----D---- C:\Windows\system32\catroot
2018-05-16 14:29:49 ----D---- C:\Windows\winsxs
2018-05-16 11:45:38 ----SHD---- C:\Windows\Installer
2018-05-16 11:45:04 ----D---- C:\Windows\SysWOW64
2018-05-16 11:31:45 ----HD---- C:\ProgramData
2018-05-16 11:31:28 ----D---- C:\Windows
2018-05-16 11:27:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-05-16 11:27:23 ----D---- C:\Windows\system32\en-US
2018-05-16 11:27:23 ----D---- C:\Windows\system32\drivers
2018-05-16 11:27:23 ----D---- C:\Windows\system32\cs-CZ
2018-05-16 11:27:21 ----D---- C:\Windows\system32\CodeIntegrity
2018-05-16 11:27:21 ----D---- C:\Windows\system32\Boot
2018-05-16 11:27:21 ----D---- C:\Windows\AppPatch
2018-05-16 11:27:20 ----D---- C:\Windows\SYSWOW64\wbem
2018-05-16 11:27:20 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-05-16 11:27:19 ----D---- C:\Windows\system32\wbem
2018-05-16 11:27:19 ----D---- C:\Windows\system32\drivers\en-US
2018-05-16 11:27:19 ----D---- C:\Windows\system32\AdvancedInstallers
2018-05-16 11:27:18 ----D---- C:\Windows\tracing
2018-05-16 11:27:18 ----D---- C:\Windows\PolicyDefinitions
2018-05-16 11:27:17 ----SD---- C:\Windows\system32\CompatTel
2018-05-16 11:27:17 ----D---- C:\Windows\Logs
2018-05-16 11:27:17 ----D---- C:\Windows\AppCompat
2018-05-16 11:27:16 ----D---- C:\Windows\SYSWOW64\en-US
2018-05-16 11:27:14 ----SD---- C:\ProgramData\Microsoft
2018-05-16 11:27:13 ----RSD---- C:\Windows\Fonts
2018-05-16 11:26:33 ----D---- C:\Windows\system32\DriverStore
2018-05-16 11:24:05 ----SHD---- C:\System Volume Information
2018-05-16 10:29:18 ----D---- C:\Program Files (x86)\Intel
2018-05-16 10:27:38 ----D---- C:\Windows\Microsoft.NET
2018-05-16 10:18:27 ----RSD---- C:\Windows\assembly
2018-05-16 09:52:12 ----D---- C:\Windows\ShellNew
2018-05-16 09:52:11 ----RD---- C:\Program Files
2018-05-16 09:52:07 ----D---- C:\Windows\ehome
2018-05-16 09:51:36 ----D---- C:\Windows\system32\migration
2018-05-16 09:44:29 ----D---- C:\Windows\system32\MRT
2018-05-16 09:44:29 ----D---- C:\Windows\debug
2018-05-16 09:43:23 ----AC---- C:\Windows\system32\MRT.exe
2018-05-16 09:42:14 ----D---- C:\Program Files\Microsoft Security Client
2018-05-16 09:41:42 ----D---- C:\Program Files (x86)\Microsoft Security Client
2018-05-16 09:40:16 ----D---- C:\Program Files\Microsoft Silverlight
2018-05-16 09:40:16 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2018-05-16 09:30:04 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-05-16 08:49:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-05-16 08:49:37 ----D---- C:\Windows\system32\Macromed
2018-05-16 08:49:34 ----D---- C:\Windows\SYSWOW64\Macromed
2018-05-16 08:05:41 ----D---- C:\Windows\system32\LogFiles
2018-05-01 11:55:47 ----D---- C:\Windows\system32\Tasks
2018-05-01 11:37:21 ----SD---- C:\Users\PB\AppData\Roaming\Microsoft
2018-05-01 11:33:30 ----RD---- C:\Program Files (x86)
2018-05-01 11:32:37 ----D---- C:\Windows\Tasks
2018-05-01 11:27:08 ----D---- C:\Program Files (x86)\Microsoft Office
2018-05-01 11:26:58 ----D---- C:\Program Files (x86)\Common Files
2018-05-01 11:25:39 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-01 11:22:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2018-05-01 10:58:56 ----D---- C:\Windows\Panther
2018-05-01 10:58:46 ----D---- C:\Windows\Minidump
2018-05-01 10:49:09 ----D---- C:\Program Files (x86)\Packard Bell Games
2018-05-01 10:47:11 ----D---- C:\ProgramData\Skype
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-04-13 540696]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-02 2750464]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-10 12311904]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-06-22 2399848]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-06-21 287232]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-09-22 243712]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-01-05 867712]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-30 36456]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-18 268824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-29 255744]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-16 272384]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-12-17 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-01 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-04-28 194512]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-05 1255736]
S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zamrzávání - dlouhé odezvy
OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: zamrzávání - dlouhé odezvy
řekl bych rychlejší 
můžu ještě poprosit o radu jak vypnout vypínání (zamykání) disku na ntb při neaktivitě?
můžu ještě poprosit o radu jak vypnout vypínání (zamykání) disku na ntb při neaktivitě?
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zamrzávání - dlouhé odezvy
Startmenu>ovl. panely>systém a zabezpečení>možnosti napájení>změnit nastvení schématu a upravit hodnoty. Uložit a restartovat.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: zamrzávání - dlouhé odezvy
Moc díky, posílám drobný příspěvek
-
Rudy
- Site Admin
- Příspěvky: 118254
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zamrzávání - dlouhé odezvy
Za příspěvek děkujeme a vy nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?