Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zavirovaný Windows na MacBook

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
exko
Návštěvník
Návštěvník
Příspěvky: 1
Registrován: 16 kvě 2018 15:49

Zavirovaný Windows na MacBook

#1 Příspěvek od exko »

Dobrý den, mam zavirovaný windwos na macbook air, widnows mam daný přes Boot Camp. Notebook je hrozně zpomalený a občas se třeba na 2 minuty zasekne, to samé je i u prohlížeče na internet, hrozně dlouho se tam načítají stránky atd.
Za každou radu a pomoc budu rád.
Děkuji.

Logy:

Logfile of random's system information tool 1.10 (written by random/random)
Run by jjjjjj at 2018-05-16 17:18:25
Microsoft Windows 10 Home
System drive C: has 20 GB (42%) free of 48 GB
Total RAM: 8094 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:18:34, on 16.05.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\jjjjjj\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\jjjjjj.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDrive] "C:\Users\jjjjjj\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Bonjour service] C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe --user-data-dir="C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" --no-sandbox --no-zygote --flag-switches-begin --flag-switches-end --nwapp="C:\Users\jjjjjj\AppData\Local\Temp\nw4512_2729" --restore-last-session
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple OS Switch Manager (AppleOSSMgr) - Unknown owner - C:\Windows\system32\AppleOSSMgr.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\Windows\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\Windows\system32\xbgmsvc.exe (file missing)

--
End of file - 7428 bytes

======Listing Processes======










c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
C:\Windows\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
winlogon.exe
"fontdrvhost.exe"
"dwm.exe"
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d22deafc-b81c-49f9-88c2-3e2067346990 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5d4f3532-3ad7-4565-a336-85f5e3d77100 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7679fcbc-0341-48b0-8d28-d71e02089f1c -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0a65b5fb-3a08-44d0-9cb7-cadd5a128b96 -LifetimeId:53549e55-9bf1-4c5d-a136-964548ff2906 -DeviceGroupId:WudfDefaultDevicePool
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\Windows\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SensorService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-8270c709-cc88-46c2-8b38-6fef10071c8d -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1d611d6e-c18d-4403-bd70-5310751b0e9a -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-82605871-f41e-49e3-a8c5-f6a3ac132f98 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ca5620fb-b968-4def-b82e-dc201d54da70 -LifetimeId:ca5e49ad-c136-4f22-b909-993a2ba8084f -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache

c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\Windows\system32\svchost.exe -k LocalService -p
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p

c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection

C:\Windows\system32\WLANExt.exe 2284400880528
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
C:\Windows\system32\AppleOSSMgr.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
C:\Windows\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer


c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
igfxEM.exe
"ctfmon.exe"
igfxHK.exe
igfxTray.exe
C:\Windows\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NgcSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
C:\Windows\System32\svchost.exe -k netsvcs -p
"C:\Program Files\Boot Camp\Bootcamp.exe"
AvastUI.exe /nogui
"C:\Users\jjjjjj\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe"
C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe --type=crashpad-handler "--user-data-dir=C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data\Crashpad" "--metrics-dir=C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" --annotation=plat=Win64 "--annotation=prod=Bonjour service" --annotation=ver= --initial-client-data=0x3c,0x290,0x294,0x28c,0x298,0x7ffb8a312098,0x7ffb8a3120a8,0x7ffb8a3120b8
"C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe" --type=gpu-process --field-trial-handle=1608,3260512846914977387,8895534850106291517,131072 --no-sandbox --user-data-dir="C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" --nwapp-path="C:\Users\jjjjjj\AppData\Local\Temp\nw10144_31670" --start-stack-profiler --gpu-preferences=GAAAAAAAAAAABwAAAQAAAAAAAAAAAGAA --gpu-vendor-id=0x8086 --gpu-device-id=0x1626 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4240 --gpu-driver-date=6-16-2015 --user-data-dir="C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" --nwapp-path="C:\Users\jjjjjj\AppData\Local\Temp\nw10144_31670" --start-stack-profiler --service-request-channel-token=5BCC059734B6A44AB2B2B834942E1075 --mojo-platform-channel-handle=1620 /prefetch:2
"C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe" --type=renderer --no-sandbox --no-zygote --field-trial-handle=1608,3260512846914977387,8895534850106291517,131072 --service-pipe-token=5CDE0E6BD9DBDA825CB67040F8876186 --lang=cs --user-data-dir="C:\Users\jjjjjj\AppData\Local\Bonjour service\User Data" --nwapp-path="C:\Users\jjjjjj\AppData\Local\Temp\nw10144_31670" --nwjs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true,cssExternalScannerNoPreload=false,cssExternalScannerPreload=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-checker-imaging --enable-compositor-image-animations --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --service-request-channel-token=5CDE0E6BD9DBDA825CB67040F8876186 --renderer-client-id=3 --mojo-platform-channel-handle=2300 /prefetch:1
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\unsecapp.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

C:\Windows\system32\SettingSyncHost.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" --type=renderer --disable-gpu-compositing --disable-pinch --no-sandbox --primordial-pipe-token=67804838FE144D6E392C4F8A9CDEC54D --lang=en-US --lang=en-US --log-file="C:\Users\jjjjjj\AppData\Roaming\AVAST Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.3.2987.1601 Safari/537.36 Avastium (18.4.2338)" --proxy-auto-detect --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=67804838FE144D6E392C4F8A9CDEC54D --renderer-client-id=2 --mojo-platform-channel-handle=4592 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\jjjjjj\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\jjjjjj\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\jjjjjj\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=66.0.3359.170 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1d8,0x1e8,0x7ffb92703218,0x7ffb92703228,0x7ffb92703238
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=9964 --on-initialized-event-handle=688 --parent-handle=692 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=C0FEA79A683515EED6C4C3BD43BCD799 --mojo-platform-channel-handle=988 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --service-pipe-token=F1F8DB6EF0449ACAB8CF896E54E28CF1 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=F1F8DB6EF0449ACAB8CF896E54E28CF1 --renderer-client-id=3 --mojo-platform-channel-handle=3064 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --lang=cs --service-sandbox-type=utility --service-request-channel-token=B72D7860858B78F275C583FED08E8EA4 --mojo-platform-channel-handle=8332 --ignored=" --type=renderer " /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --service-pipe-token=6F8EFA9C595C2FAB49A1FACDE0CDAC68 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=6F8EFA9C595C2FAB49A1FACDE0CDAC68 --renderer-client-id=55 --mojo-platform-channel-handle=11560 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --service-pipe-token=8400A71A0E10E64280EC13F3FA49B281 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=8400A71A0E10E64280EC13F3FA49B281 --renderer-client-id=59 --mojo-platform-channel-handle=4912 /prefetch:1
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s icssvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --service-pipe-token=31C33B9672FB082B7E3809E3B643BB65 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=31C33B9672FB082B7E3809E3B643BB65 --renderer-client-id=60 --mojo-platform-channel-handle=12628 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=960,5546587939356894246,3745388703525702977,131072 --service-pipe-token=147424B44DAC03DB9CE1CF36A9B201CB --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --enable-compositor-image-animations --service-request-channel-token=147424B44DAC03DB9CE1CF36A9B201CB --renderer-client-id=61 --mojo-platform-channel-handle=12560 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\system32\AUDIODG.EXE 0x250
consent.exe 2340 348 00000251628342C0
"C:\Users\jjjjjj\Downloads\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 716 720 728 8192 724

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"Apple_KbdMgr"=C:\Program Files\Boot Camp\Bootcamp.exe [2016-03-31 2713448]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-05-16 242904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\jjjjjj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-15 1624224]
"Bonjour service"=C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe [2017-12-25 1737217]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-04-12 18334528]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"=C:\Users\jjjjjj\AppData\Roaming\Bonjour\BonjourService.exe [2017-12-25 1737217]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.vorbis"=vorbis.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-05-16 17:18:26 ----D---- C:\Program Files\trend micro
2018-05-16 17:18:25 ----D---- C:\rsit
2018-05-16 15:19:49 ----D---- C:\Windows\Microsoft Antimalware
2018-05-16 11:20:46 ----D---- C:\Users\jjjjjj\AppData\Roaming\AVAST Software
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswStm.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswSP.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswHdsKe.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswbuniva.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswbloga.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswbidsha.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswbidsdrivera.sys
2018-05-16 11:19:25 ----A---- C:\Windows\system32\drivers\aswArPot.sys
2018-05-16 11:19:12 ----A---- C:\Windows\system32\aswBoot.exe
2018-05-16 11:19:10 ----D---- C:\Program Files\Common Files\AVAST Software
2018-05-16 11:18:19 ----D---- C:\Program Files\CCleaner
2018-05-16 11:17:24 ----D---- C:\Program Files\AVAST Software
2018-05-16 11:16:55 ----D---- C:\ProgramData\AVAST Software
2018-05-15 21:37:17 ----A---- C:\Windows\SYSWOW64\SYNSOEMU.DLL
2018-05-15 19:30:09 ----D---- C:\Program Files (x86)\Nexus
2018-05-15 19:30:07 ----D---- C:\Program Files (x86)\reFX
2018-05-15 19:01:45 ----D---- C:\Users\jjjjjj\AppData\Roaming\Glitch2
2018-05-15 18:59:41 ----D---- C:\Users\jjjjjj\AppData\Roaming\Xfer
2018-05-15 18:58:13 ----D---- C:\Program Files\Common Files\Avid
2018-05-15 18:49:02 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2018-05-15 18:49:02 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2018-05-15 17:33:51 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2018-05-15 17:30:42 ----D---- C:\Program Files\Common Files\VST2
2018-05-15 17:30:40 ----D---- C:\Program Files\Common Files\Propellerhead Software
2018-05-15 17:30:40 ----D---- C:\Program Files (x86)\VstPlugins
2018-05-15 17:28:58 ----D---- C:\Users\jjjjjj\AppData\Roaming\Image-Line
2018-05-15 17:28:55 ----D---- C:\Program Files\Image-Line
2018-05-15 17:19:37 ----D---- C:\Program Files (x86)\Image-Line
2018-05-15 17:18:48 ----D---- C:\Users\jjjjjj\AppData\Roaming\Bonjour
2018-05-15 17:17:00 ----D---- C:\Users\jjjjjj\AppData\Roaming\WinRAR
2018-05-15 16:39:43 ----A---- C:\Windows\system32\drivers\iaLPSS_UART.sys
2018-05-15 16:39:43 ----A---- C:\Windows\system32\drivers\iaLPSS_SPI.sys
2018-05-15 16:39:43 ----A---- C:\Windows\system32\drivers\iaLPSS_I2C.sys
2018-05-15 16:39:43 ----A---- C:\Windows\system32\drivers\iaLPSS_GPIO.sys
2018-05-15 16:39:18 ----A---- C:\Windows\system32\drivers\AppleSSD.sys
2018-05-15 16:39:18 ----A---- C:\Windows\system32\drivers\AppleSPITrackpad.sys
2018-05-15 16:39:18 ----A---- C:\Windows\system32\drivers\AppleSPIKeyboard.sys
2018-05-15 16:39:18 ----A---- C:\Windows\system32\drivers\AppleSPIDevice.sys
2018-05-15 16:39:18 ----A---- C:\Windows\system32\drivers\AppleBtBc.sys
2018-05-15 16:39:05 ----D---- C:\Program Files\WinRAR
2018-05-15 16:36:25 ----D---- C:\Users\jjjjjj\AppData\Roaming\Google
2018-05-15 16:14:45 ----N---- C:\Windows\system32\MpSigStub.exe
2018-05-15 16:14:40 ----D---- C:\Program Files (x86)\Google
2018-05-15 15:40:20 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2018-05-15 15:40:20 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2018-05-15 15:40:20 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2018-05-15 15:40:20 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2018-05-15 15:40:20 ----A---- C:\Windows\system32\iglhsip64.dll
2018-05-15 15:40:20 ----A---- C:\Windows\system32\iglhcp64.dll
2018-05-15 15:40:20 ----A---- C:\Windows\system32\igfxext.exe
2018-05-15 15:40:20 ----A---- C:\Windows\system32\igfxexps.dll
2018-05-15 15:40:20 ----A---- C:\Windows\system32\igfxCoIn_v4240.dll
2018-05-15 15:40:20 ----A---- C:\Windows\system32\igfxcmrt64.dll
2018-05-15 15:40:19 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2018-05-15 15:40:19 ----A---- C:\Windows\SYSWOW64\igfx11cmrt32.dll
2018-05-15 15:40:19 ----A---- C:\Windows\SYSWOW64\igdusc32.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxTray.exe
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxSDKLibv2_0.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxSDKLib.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxSDK.exe
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxOSP.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxLHMLibv2_0.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxLHMLib.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxLHM.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxHK.exe
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxEMLibv2_0.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxEMLib.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxEM.exe
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDTCM.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDILibv2_0.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDILib.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDI.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDHLibv2_0.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDHLib.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxDH.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxCUIServicePS.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxCUIService.exe
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfxcmjit64.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igfx11cmrt64.dll
2018-05-15 15:40:19 ----A---- C:\Windows\system32\igdusc64.dll
2018-05-15 15:40:18 ----A---- C:\Windows\system32\igdumdim64.dll
2018-05-15 15:40:17 ----A---- C:\Windows\SYSWOW64\igdumdim32.dll
2018-05-15 15:40:17 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2018-05-15 15:40:17 ----A---- C:\Windows\SYSWOW64\igdmd32.dll
2018-05-15 15:40:17 ----A---- C:\Windows\system32\igdrcl64.dll
2018-05-15 15:40:17 ----A---- C:\Windows\system32\igdmd64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\SYSWOW64\igdmcl32.dll
2018-05-15 15:40:16 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2018-05-15 15:40:16 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2018-05-15 15:40:16 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2018-05-15 15:40:16 ----A---- C:\Windows\SYSWOW64\igdail32.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\igdmcl64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\igdfcl64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\igdde64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\igdbcl64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\igdail64.dll
2018-05-15 15:40:16 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2018-05-15 15:40:15 ----A---- C:\Windows\SYSWOW64\igd12umd32.dll
2018-05-15 15:40:15 ----A---- C:\Windows\system32\igd12umd64.dll
2018-05-15 15:40:14 ----A---- C:\Windows\SYSWOW64\igd11dxva32.dll
2018-05-15 15:40:14 ----A---- C:\Windows\system32\igd11dxva64.dll
2018-05-15 15:40:13 ----A---- C:\Windows\SYSWOW64\igd10iumd32.dll
2018-05-15 15:40:13 ----A---- C:\Windows\SYSWOW64\igd10idpp32.dll
2018-05-15 15:40:13 ----A---- C:\Windows\system32\igd10iumd64.dll
2018-05-15 15:40:13 ----A---- C:\Windows\system32\igd10idpp64.dll
2018-05-15 15:40:13 ----A---- C:\Windows\system32\igc64.dll
2018-05-15 15:40:12 ----A---- C:\Windows\SYSWOW64\igc32.dll
2018-05-15 15:40:11 ----A---- C:\Windows\SYSWOW64\ig8icd32.dll
2018-05-15 15:40:11 ----A---- C:\Windows\system32\ig8icd64.dll
2018-05-15 15:40:11 ----A---- C:\Windows\system32\difx64.exe
2018-05-15 15:40:10 ----A---- C:\Windows\system32\common_clang64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2018-05-15 15:40:09 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2018-05-15 15:40:09 ----A---- C:\Windows\SYSWOW64\Intel_OpenCL_ICD32.dll
2018-05-15 15:40:09 ----A---- C:\Windows\SYSWOW64\common_clang32.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\MetroIntelGenericUIFramework.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelWiDiUtils64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelWiDiUMS64.exe
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelWiDiMCComp64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelWiDiLogServer64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\IntelCpHDCPSvc.exe
2018-05-15 15:40:09 ----A---- C:\Windows\system32\Intel_OpenCL_ICD64.dll
2018-05-15 15:40:09 ----A---- C:\Windows\system32\Gfxv4_0.exe
2018-05-15 15:40:09 ----A---- C:\Windows\system32\Gfxv2_0.exe
2018-05-15 15:40:09 ----A---- C:\Windows\system32\GfxUIEx.exe
2018-05-15 15:40:09 ----A---- C:\Windows\system32\GfxResources.dll
2018-05-15 15:40:08 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2018-05-15 15:40:08 ----A---- C:\Windows\system32\DPTopologyAppv2_0.exe
2018-05-15 15:40:08 ----A---- C:\Windows\system32\DPTopologyApp.exe
2018-05-15 14:46:20 ----D---- C:\Windows\Panther
2018-05-15 14:00:44 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll
2018-05-15 14:00:44 ----A---- C:\Windows\system32\drivers\AppleSDR.sys
2018-05-15 14:00:39 ----A---- C:\Windows\system32\drivers\AppleCamera.sys
2018-05-15 14:00:37 ----D---- C:\Program Files\Boot Camp
2018-05-15 14:00:34 ----A---- C:\Windows\SYSWOW64\OpenCL.DLL
2018-05-15 14:00:34 ----A---- C:\Windows\system32\OpenCL.DLL
2018-05-15 14:00:33 ----A---- C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2018-05-15 14:00:33 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-05-15 13:59:42 ----D---- C:\Intel
2018-05-15 13:59:27 ----A---- C:\Windows\system32\drivers\applemtp.sys
2018-05-15 13:59:16 ----A---- C:\Windows\system32\WdfCoInstaller01011.dll
2018-05-15 13:59:16 ----A---- C:\Windows\system32\drivers\CSUFD.sys
2018-05-15 13:59:16 ----A---- C:\Windows\system32\drivers\CSLFD.sys
2018-05-15 13:59:16 ----A---- C:\Windows\system32\CLFiltAPO.dll
2018-05-15 13:58:47 ----A---- C:\Windows\system32\drivers\BCMWL63a.SYS
2018-05-15 13:58:47 ----A---- C:\Windows\system32\bcmihvui64.dll
2018-05-15 13:58:46 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2018-05-15 13:58:31 ----D---- C:\Program Files\DIFX
2018-05-15 13:58:28 ----A---- C:\Windows\system32\drivers\KeyMagic.sys
2018-05-15 13:57:59 ----D---- C:\ProgramData\Apple
2018-05-15 13:57:59 ----D---- C:\Program Files (x86)\Apple Software Update
2018-05-15 13:57:15 ----D---- C:\ProgramData\Package Cache
2018-05-15 13:55:57 ----D---- C:\Program Files\Intel
2018-05-15 13:55:50 ----D---- C:\ProgramData\Intel
2018-05-15 13:55:48 ----D---- C:\Program Files (x86)\Intel
2018-05-15 13:55:43 ----D---- C:\ProgramData\Microsoft OneDrive
2018-05-15 13:54:45 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-05-15 13:54:20 ----D---- C:\Users\jjjjjj\AppData\Roaming\Adobe
2018-05-15 13:53:28 ----SD---- C:\Users\jjjjjj\AppData\Roaming\Microsoft
2018-05-15 13:52:22 ----D---- C:\ProgramData\USOShared
2018-05-15 13:52:21 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2018-05-15 13:52:08 ----D---- C:\Windows\SoftwareDistribution
2018-05-15 13:50:19 ----SHD---- C:\ProgramData\Šablony
2018-05-15 13:50:19 ----SHD---- C:\ProgramData\Plocha
2018-05-15 13:50:19 ----SHD---- C:\ProgramData\Nabídka Start
2018-05-15 13:50:19 ----SHD---- C:\ProgramData\Dokumenty
2018-05-15 13:50:19 ----SHD---- C:\ProgramData\Data aplikací
2018-05-15 13:50:19 ----SHD---- C:\Documents and Settings
2018-05-15 13:50:07 ----ASH---- C:\hiberfil.sys
2018-05-15 13:49:40 ----SHD---- C:\Recovery
2018-05-15 13:48:52 ----AS---- C:\Windows\bootstat.dat
2018-05-15 13:48:29 ----HD---- C:\Program Files\Uninstall Information
2018-05-15 13:48:22 ----D---- C:\Windows\system32\drivers\wd
2018-05-15 13:48:21 ----D---- C:\Windows\Prefetch
2018-05-15 13:48:13 ----D---- C:\Windows\system32\SleepStudy
2018-05-15 13:48:13 ----D---- C:\Windows\ServiceProfiles
2018-05-15 13:48:12 ----SD---- C:\Windows\system32\Microsoft
2018-05-15 13:48:12 ----ASH---- C:\swapfile.sys
2018-05-15 13:48:12 ----ASH---- C:\pagefile.sys
2018-05-15 13:48:12 ----A---- C:\Windows\system32\FNTCACHE.DAT
2018-05-15 13:48:11 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======

2018-05-16 17:18:26 ----RD---- C:\Program Files
2018-05-16 17:14:04 ----D---- C:\Windows\Temp
2018-05-16 16:39:45 ----HD---- C:\Program Files\WindowsApps
2018-05-16 16:39:13 ----D---- C:\Windows\AppReadiness
2018-05-16 16:37:54 ----D---- C:\Windows
2018-05-16 16:32:42 ----D---- C:\Windows\System32
2018-05-16 16:32:42 ----D---- C:\Windows\INF
2018-05-16 16:30:18 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-05-16 16:06:47 ----D---- C:\Windows\system32\WDI
2018-05-16 16:06:47 ----D---- C:\Windows\system32\sru
2018-05-16 16:06:47 ----D---- C:\Windows\system32\catroot2
2018-05-16 15:23:24 ----D---- C:\Windows\system32\config
2018-05-16 15:23:24 ----D---- C:\Windows\Logs
2018-05-16 14:35:33 ----D---- C:\Windows\WinSxS
2018-05-16 14:35:33 ----D---- C:\Windows\SysWOW64
2018-05-16 14:23:59 ----D---- C:\Windows\CbsTemp
2018-05-16 14:11:20 ----D---- C:\Windows\debug
2018-05-16 11:19:34 ----D---- C:\Windows\system32\Tasks
2018-05-16 11:19:25 ----D---- C:\Windows\system32\drivers
2018-05-16 11:19:10 ----D---- C:\Program Files\Common Files
2018-05-16 11:16:55 ----HD---- C:\ProgramData
2018-05-15 21:46:18 ----D---- C:\Windows\LiveKernelReports
2018-05-15 21:41:10 ----D---- C:\Program Files (x86)\Common Files
2018-05-15 21:39:36 ----RD---- C:\Program Files (x86)
2018-05-15 19:19:17 ----SHD---- C:\Windows\Installer
2018-05-15 18:00:12 ----D---- C:\Windows\system32\LogFiles
2018-05-15 16:45:42 ----D---- C:\Program Files\Windows Defender
2018-05-15 16:06:52 ----SD---- C:\ProgramData\Microsoft
2018-05-15 16:04:43 ----RD---- C:\Users
2018-05-15 14:02:20 ----D---- C:\Windows\system32\CatRoot
2018-05-15 14:01:06 ----D---- C:\Windows\system32\CodeIntegrity
2018-05-15 14:00:44 ----D---- C:\Windows\system32\DriverStore
2018-05-15 13:58:31 ----SHD---- C:\$Recycle.Bin
2018-05-15 13:55:49 ----D---- C:\Windows\SYSWOW64\drivers
2018-05-15 13:54:21 ----D---- C:\Windows\system32\wbem
2018-05-15 13:53:29 ----D---- C:\Windows\system32\WinBioDatabase
2018-05-15 13:52:23 ----D---- C:\Windows\system32\spool
2018-05-15 13:52:23 ----D---- C:\Windows\system32\FxsTmp
2018-05-15 13:52:22 ----D---- C:\ProgramData\USOPrivate
2018-05-15 13:50:19 ----D---- C:\Program Files\windows nt
2018-05-15 13:49:40 ----D---- C:\Windows\system32\Recovery
2018-05-15 13:48:39 ----RD---- C:\Windows\PrintDialog
2018-05-15 13:48:38 ----RD---- C:\Windows\ImmersiveControlPanel
2018-05-15 13:48:27 ----D---- C:\Windows\system32\drivers\UMDF
2018-05-15 13:48:21 ----D---- C:\Windows\Tasks
2018-05-01 23:22:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AppleHFS;AppleHFS; C:\Windows\system32\drivers\AppleHFS.sys [2016-03-31 70432]
R0 AppleMNT;AppleMNT; C:\Windows\system32\drivers\AppleMNT.sys [2016-03-31 16672]
R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [2018-05-16 199440]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswbloga.sys [2018-05-16 343752]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [2018-05-16 57680]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-05-16 85968]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-05-16 381552]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2018-04-12 58272]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\Windows\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\Windows\system32\drivers\afunix.sys [2018-04-12 39424]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-05-16 196640]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [2018-05-16 227504]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-05-16 234560]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-05-16 111360]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-05-16 1027720]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-05-16 460520]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\Windows\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 MacHALDriver;Mac HAL; \??\C:\Windows\system32\drivers\MacHALDriver.sys [2016-03-31 33568]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-05-16 159120]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-05-16 205976]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 KeyAgent;KeyAgent; \??\C:\Windows\system32\drivers\KeyAgent.sys [2016-03-31 18720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2018-04-12 43520]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2018-04-12 82432]
R3 acpials;@sensorsalsdriver.inf,%kbfiltr.SvcDesc%;ALS Sensor Filter; C:\Windows\System32\drivers\acpials.sys [2018-04-12 12288]
R3 AppleBtBc;@oem0.inf,%AppleBuildInBt%;Apple Broadcom Built-in Bluetooth; C:\Windows\system32\DRIVERS\AppleBtBc.sys [2015-10-01 38912]
R3 AppleCamera;@oem46.inf,%AppleDigitalCamera.DeviceDesc%;FaceTime HD Camera; C:\Windows\system32\DRIVERS\AppleCamera.sys [2016-03-02 1934320]
R3 applemtp;@oem33.inf,%Multitouch.SvcDesc%;Apple Multi-Touch; C:\Windows\System32\drivers\applemtp.sys [2015-10-01 49152]
R3 AppleSDR;@oem47.inf,%AppleSDR.SvcDesc%;Apple SD Card Reader; C:\Windows\system32\DRIVERS\AppleSDR.sys [2015-10-01 12800]
R3 BCM43XX;@oem22.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2016-03-02 10828536]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@Bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\system32\DRIVERS\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2018-04-12 60320]
R3 CirrusLFD;@oem29.inf,%LowerFilt.SvcDesc%;CS42xxLowerFilter; C:\Windows\system32\DRIVERS\CSLFD.sys [2016-03-02 89168]
R3 CirrusUFD;@oem29.inf,%UpperFilt.SvcDesc%;CS42xxUpperFilter; C:\Windows\system32\DRIVERS\CSUFD.sys [2016-03-02 13496]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-03-02 6079928]
R3 IntcDAud;@oem45.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2016-03-02 462096]
R3 KeyMagic;@oem18.inf,%HIDKbFlt.SvcDesc%;USB Keyboard HID Filter; C:\Windows\System32\drivers\KeyMagic.sys [2016-03-02 50688]
R3 MEIx64;@oem15.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-10-10 129312]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 SensorsAlsDriver;@sensorsalsdriver.inf,%WudfSensorsAlsDriverDisplayName%;UMDF Reflector service for SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [2018-04-12 264192]
S0 AppleSSD;@oem4.inf,%DevDesc1%;Apple Solid State Drive Device; C:\Windows\System32\drivers\AppleSSD.sys [2016-03-04 94944]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\Windows\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\Windows\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\Windows\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\Windows\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\Windows\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2018-04-12 128416]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2018-04-12 48544]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 AppleSPIDevice;@oem1.inf,%AppleSPIDevice.SVCDESC%;AppleSPIDevice Service; C:\Windows\System32\drivers\AppleSPIDevice.sys [2015-10-01 27136]
S3 AppleSPIKeyboard;@oem2.inf,%AppleSPIKeyboard.SVCDESC%;AppleSPIKeyboard Service; C:\Windows\System32\drivers\AppleSPIKeyboard.sys [2015-10-01 26336]
S3 AppleSPITrackpad;@oem3.inf,%AppleSPITrackpad.SVCDESC%;AppleSPITrackpad Service; C:\Windows\System32\drivers\AppleSPITrackpad.sys [2015-10-01 46592]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-05-16 46968]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\Windows\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@Bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\system32\DRIVERS\BTHport.sys [2018-04-12 1069056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\Windows\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS_GPIO;@oem9.inf,%iaLPSS_GPIO.SVCDESC%;Intel(R) Serial IO GPIO Driver; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [2016-03-02 35832]
S3 iaLPSS_I2C;@oem10.inf,%iaLPSS_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver; C:\Windows\System32\drivers\iaLPSS_I2C.sys [2016-03-02 120312]
S3 iaLPSS_SPI;@oem11.inf,%iaLPSS_SPI.SVCDESC%;Intel(R) Serial IO SPI Driver; C:\Windows\System32\drivers\iaLPSS_SPI.sys [2016-03-02 101880]
S3 iaLPSS_UART;@oem12.inf,%iaLPSS_UART.SVCDESC%;Intel(R) Serial IO UART Driver; C:\Windows\System32\drivers\iaLPSS_UART.sys [2016-03-02 143600]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\Windows\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\Windows\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\Windows\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\Windows\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\Windows\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppleOSSMgr;Apple OS Switch Manager; C:\Windows\system32\AppleOSSMgr.exe [2016-03-31 205600]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-05-16 317280]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_86713;Uživatelská služba platformy připojených zařízení_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\Windows\System32\svchost.exe [2018-04-12 51288]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-03-02 350312]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-10-10 409376]
R2 OneSyncSvc_86713;Hostitel synchronizace_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\Windows\system32\SgrmBroker.exe [2018-04-12 163336]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-05-16 7620096]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\Windows\System32\svchost.exe [2018-04-12 51288]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2018-04-12 51288]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 PimIndexMaintenanceSvc_86713;Data kontaktů_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2018-04-12 51288]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-15 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_86713;Uživatelská služba pro GameDVR a vysílání her_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_86713;Služba pro podporu uživatelů Bluetooth_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-03-02 282216]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_86713;DevicePicker_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_86713;Tok zařízení_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-15 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-05-13 887256]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_86713;Služba zasílání zpráv_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_86713;PrintWorkflow_86713; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2018-04-12 51288]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\Windows\system32\spectrum.exe [2018-04-12 976384]
S3 ssh-agent;OpenSSH Authentication Agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [2018-03-10 495616]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\Windows\System32\svchost.exe [2018-04-12 51288]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Zavirovaný Windows na MacBook

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět