Prosím o preventivní kontrolu

Zpráva

M.Lukes · #1 Příspěvek od **M.Lukes** » 17 říj 2017 14:21

Dobrý den, prosím o kontrolu zda je všechno v pořádku. Děkuji

Logfile of random's system information tool 1.16 (written by random/random) 
Run by Lukes_CZ at 2017-10-17 15:16:57
Microsoft Windows 10 Home 
System drive C: has 207 GB (54%) free of 381 GB
Total RAM: 3982 MB (39% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:17:56, on 17.10.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.1715)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files\trend micro\Lukes_CZ_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [HP DeskJet 4530 series (NET)] "C:\Program Files\HP\HP DeskJet 4530 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH69J4D0CN0661:NW" -scfn "HP DeskJet 4530 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [icq.desktop] "C:\Users\Lukes_CZ\AppData\Roaming\ICQ\bin\icq.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8929 bytes

====== Enumerating Processes ======

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
C:\Windows\System32\WinLogon.exe -SpecialSession
C:\Windows\System32\dwm.exe
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
C:\Windows\system32\sihost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\taskhostw.exe
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\dashost.exe
"C:\Program Files\Windows Defender\MSASCuiL.exe" 
"C:\Program Files\HP\HP DeskJet 4530 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH69J4D0CN0661:NW" -scfn "HP DeskJet 4530 series (NET)" -AutoStart 1
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Program Files\Windows Defender\MpCmdRun.exe
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 
C:\Windows\system32\AUDIODG.EXE 0x3e8
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files (x86)\Steam\Steam.exe" 
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" "-lang=cs_CZ" "-cachedir=C:\Users\Lukes_CZ\AppData\Local\Steam\htmlcache" "-steampid=1888" "-buildid=1507938604" "-steamid=0" "-clientui=C:\Program Files (x86)\Steam\clientui" --disable-spell-checking --disable-out-of-process-pac --enable-blink-features=ResizeObserver --disable-smooth-scrolling --disable-gpu-compositing --disable-gpu --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Lukes_CZ\AppData\Local\CEF\User Data\Crashpad" "--metrics-dir=C:\Users\Lukes_CZ\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win32 --annotation=product=cefwebhelper --annotation=version=1.0 --initial-client-data=0x2bc,0x2c0,0x2c4,0x298,0x2c8,0x656981ec,0x656981fc,0x6569820c
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --disable-smooth-scrolling --enable-blink-features=ResizeObserver --enable-pinch --service-pipe-token=99CA519C764A5658161304DCD588EC87 --lang=en-US --lang=cs-CZ --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --disable-spell-checking --buildid=1507938604 --steamid=0 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-gpu-compositing --service-request-channel-token=99CA519C764A5658161304DCD588EC87 --renderer-client-id=2 --mojo-platform-channel-handle=1796 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe109_ Global\UsGthrCtrlFltPipeMssGthrPipe109 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" 
"C:\Windows\system32\SearchFilterHost.exe" 0 668 680 688 8192 684 
"C:\Users\Lukes_CZ\Desktop\RSITx64.exe" 
C:\Windows\system32\wbem\wmiprvse.exe

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\ASUS Splendid ACMON - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
C:\Windows\system32\tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe"
C:\Windows\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
C:\Windows\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\Windows\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\Windows\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\Windows\system32\tasks\RtHDVBg_ListenToDevice - "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /AECBYLISTENTOSTATUS
C:\Windows\system32\tasks\RTKCPL - "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval - %systemroot%\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - %systemroot%\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\Windows\system32\tasks\Microsoft\Windows\UNP\RunCampaignManager - %windir%\System32\UNP\UNPCampaignManager.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\rempl\shell - %ProgramFiles%\rempl\remsh.exe
C:\Windows\system32\tasks\Microsoft\Windows\rempl\shell-unlock - %ProgramFiles%\rempl\remsh.exe /RunUsoScanOnly
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Lukes_CZ\AppData\Roaming\Mozilla\Firefox\Profiles\2f0gq0xe.default

prefs.js - "browser.startup.homepage" -  "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\Lukes_CZ\AppData\Roaming\Mozilla\Firefox\Profiles\2f0gq0xe.default\extensions\
superstart@enjoyfreeware.org

C:\Users\Lukes_CZ\AppData\Roaming\Mozilla\Firefox\Profiles\2f0gq0xe.default\addons.json
Super Start - extension - superstart@enjoyfreeware.org
Turn Off the Lights - extension - stefanvandamme@stefanvd.net
Image Download for Instagram - extension - image_download_for_instagra@image_download_for_instagra.org
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

C:\Users\Lukes_CZ\AppData\Roaming\Mozilla\Firefox\Profiles\2f0gq0xe.default\extensions.json
Image Download for Instagram - webextension - image_download_for_instagra@image_download_for_instagra.org - 
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - 
Who Deleted Me - Unfriend Finder for Facebook - webextension - whodeletedme@deleted.io - 
Super Start - extension - superstart@enjoyfreeware.org - 
Turn Off the Lights - webextension - stefanvandamme@stefanvd.net - 
Safe Browsing Version 4 (temporary add-on) - extension - sbv4-gradual-rollout@mozilla.com - 
Application Update Service Helper - extension - aushelper@mozilla.org - 
Multi-process staged rollout - extension - e10srollout@mozilla.org - 
Pocket - extension - firefox@getpocket.com - 
Web Compat - extension - webcompat@mozilla.org - 
Firefox Screenshots - extension - screenshots@mozilla.org - 
Click-to-Play staged rollout - extension - clicktoplay-rollout@mozilla.org - 
Follow-on Search Telemetry - extension - followonsearch@mozilla.com - 
Shield Recipe Client - extension - shield-recipe-client@mozilla.org - 
Activity Stream - extension - activity-stream@mozilla.org - 
Form Autofill - extension - formautofill@mozilla.org - 
Photon onboarding - extension - onboarding@mozilla.org - 
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - 

C:\Users\Lukes_CZ\AppData\Roaming\Mozilla\Firefox\Profiles\2f0gq0xe.default\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.159 - C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

=========Google Chrome=========

C:\Users\Lukes_CZ\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0  
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension coobgpohoikkiipiblmjeljniedjpjpf   
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat 15.1.0.3
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.17.0
Extension ighlmfonficnnppbhgegnpggnjokbikf 1 I Can See You 1.6
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension lneaknkopdijkpnocmklfnjbeapigfbh 1 Mapy Google 5.4.1
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf   
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.4
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6117.717.0.4
Homepage: http://www.seznam.cz/
default_search_provider.search_url: 
C:\Users\Lukes_CZ\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage: 
default_search_provider.search_url: 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-27 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-27 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-27 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-27 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-27 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-27 141496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-04-28 631808]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2017-09-19 1923008]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HP DeskJet 4530 series (NET)"=C:\Program Files\HP\HP DeskJet 4530 series\Bin\ScanToPCActivationApp.exe [2015-03-09 3651080]
"AdobeBridge"= []
"icq.desktop"=C:\Users\Lukes_CZ\AppData\Roaming\ICQ\bin\icq.exe [2017-06-23 26876040]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2017-08-01 1871344]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-17 15:16:58 ----D---- C:\Program Files\trend micro
2017-10-17 15:16:57 ----D---- C:\rsit
2017-10-15 22:24:21 ----AD---- C:\Program Files (x86)\TrucksBook Client
2017-10-15 17:13:00 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2017-10-15 17:13:00 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2017-10-15 17:13:00 ----A---- C:\Windows\system32\vulkaninfo.exe
2017-10-15 17:12:59 ----D---- C:\Program Files (x86)\VulkanRT
2017-10-15 17:12:59 ----A---- C:\Windows\system32\vulkan-1.dll
2017-10-15 17:11:14 ----D---- C:\Windows\LastGood
2017-10-15 17:07:07 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2017-10-15 17:07:06 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2017-10-15 17:07:06 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2017-10-15 17:07:06 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2017-10-15 17:07:06 ----A---- C:\Windows\system32\nvopencl.dll
2017-10-15 17:07:06 ----A---- C:\Windows\system32\nvoglv64.dll
2017-10-15 17:07:04 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2017-10-15 17:07:04 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2017-10-15 17:07:04 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2017-10-15 17:07:04 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2017-10-15 17:07:04 ----A---- C:\Windows\system32\NvIFR64.dll
2017-10-15 17:07:04 ----A---- C:\Windows\system32\NvFBC64.dll
2017-10-15 17:07:04 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2017-10-15 17:07:03 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2017-10-15 17:07:03 ----A---- C:\Windows\system32\nvdispgenco6438792.dll
2017-10-15 17:07:03 ----A---- C:\Windows\system32\nvdispco6438792.dll
2017-10-15 17:07:01 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2017-10-15 17:07:01 ----A---- C:\Windows\system32\nvcuvid.dll
2017-10-15 17:07:00 ----A---- C:\Windows\system32\nvcuda.dll
2017-10-15 17:06:54 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2017-10-15 17:06:53 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2017-10-15 17:06:53 ----A---- C:\Windows\system32\nvcompiler.dll
2017-10-13 22:50:25 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-13 22:46:26 ----A---- C:\Windows\SYSWOW64\Windows.Web.dll
2017-10-13 22:46:26 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2017-10-13 22:46:26 ----A---- C:\Windows\SYSWOW64\apprepsync.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\Windows.Web.Http.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Sensors.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2017-10-13 22:46:25 ----A---- C:\Windows\SYSWOW64\apprepapi.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\SyncSettings.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\efswrt.dll
2017-10-13 22:46:24 ----A---- C:\Windows\SYSWOW64\daxexec.dll
2017-10-13 22:46:23 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2017-10-13 22:46:23 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2017-10-13 22:46:23 ----A---- C:\Windows\SYSWOW64\PCPTpm12.dll
2017-10-13 22:46:23 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2017-10-13 22:46:23 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2017-10-13 22:46:22 ----A---- C:\Windows\SYSWOW64\Windows.UI.Search.dll
2017-10-13 22:46:22 ----A---- C:\Windows\SYSWOW64\AboveLockAppHost.dll
2017-10-13 22:46:21 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2017-10-13 22:46:21 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-10-13 22:46:21 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2017-10-13 22:46:20 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2017-10-13 22:46:20 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2017-10-13 22:46:20 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2017-10-13 22:46:20 ----A---- C:\Windows\SYSWOW64\AppContracts.dll
2017-10-13 22:46:19 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2017-10-13 22:46:19 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.dll
2017-10-13 22:46:19 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2017-10-13 22:46:19 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2017-10-13 22:46:19 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2017-10-13 22:46:18 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-10-13 22:46:18 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-10-13 22:46:18 ----A---- C:\Windows\SYSWOW64\ExSMime.dll
2017-10-13 22:46:17 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2017-10-13 22:46:17 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-10-13 22:46:17 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2017-10-13 22:46:16 ----A---- C:\Windows\SYSWOW64\TpmCoreProvisioning.dll
2017-10-13 22:46:16 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2017-10-13 22:46:16 ----A---- C:\Windows\SYSWOW64\mfnetcore.dll
2017-10-13 22:46:16 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2017-10-13 22:46:15 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-10-13 22:46:15 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2017-10-13 22:46:14 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-10-13 22:46:14 ----A---- C:\Windows\SYSWOW64\twinui.dll
2017-10-13 22:46:14 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-10-13 22:46:13 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2017-10-13 22:46:13 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2017-10-13 22:46:12 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2017-10-13 22:46:12 ----A---- C:\Windows\SYSWOW64\netshell.dll
2017-10-13 22:46:11 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2017-10-13 22:46:11 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2017-10-13 22:46:10 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-10-13 22:46:10 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2017-10-13 22:46:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-10-13 22:46:07 ----A---- C:\Windows\SYSWOW64\offlinesam.dll
2017-10-13 22:46:06 ----A---- C:\Windows\SYSWOW64\wsp_health.dll
2017-10-13 22:46:06 ----A---- C:\Windows\SYSWOW64\wsp_fs.dll
2017-10-13 22:46:06 ----A---- C:\Windows\SYSWOW64\mispace.dll
2017-10-13 22:46:06 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2017-10-13 22:46:06 ----A---- C:\Windows\SYSWOW64\aadtb.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\VCardParser.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\ngccredprov.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\dsreg.dll
2017-10-13 22:46:04 ----A---- C:\Windows\SYSWOW64\cryptngc.dll
2017-10-13 22:46:03 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2017-10-13 22:46:03 ----A---- C:\Windows\SYSWOW64\webio.dll
2017-10-13 22:46:03 ----A---- C:\Windows\SYSWOW64\scksp.dll
2017-10-13 22:46:03 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2017-10-13 22:46:02 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2017-10-13 22:46:02 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2017-10-13 22:46:02 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-10-13 22:46:02 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-10-13 22:46:02 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\dmcmnutils.dll
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\dinput8.dll
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostUser.dll
2017-10-13 22:46:01 ----A---- C:\Windows\SYSWOW64\certutil.exe
2017-10-13 22:46:00 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-10-13 22:46:00 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2017-10-13 22:46:00 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-10-13 22:46:00 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-10-13 22:46:00 ----A---- C:\Windows\system32\drivers\hidbth.sys
2017-10-13 22:46:00 ----A---- C:\Windows\system32\drivers\BasicRender.sys
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\mspaint.exe
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\dinput.dll
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\certreq.exe
2017-10-13 22:45:59 ----A---- C:\Windows\SYSWOW64\authz.dll
2017-10-13 22:45:58 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-10-13 22:45:58 ----A---- C:\Windows\SYSWOW64\netprofm.dll
2017-10-13 22:45:58 ----A---- C:\Windows\SYSWOW64\MSWB7.dll
2017-10-13 22:45:58 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2017-10-13 22:45:58 ----A---- C:\Windows\SYSWOW64\CertEnrollUI.dll
2017-10-13 22:45:57 ----A---- C:\Windows\SYSWOW64\xpsrchvw.exe
2017-10-13 22:45:57 ----A---- C:\Windows\system32\tquery.dll
2017-10-13 22:45:57 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-13 22:45:57 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-13 22:45:57 ----A---- C:\Windows\system32\mssrch.dll
2017-10-13 22:45:56 ----A---- C:\Windows\system32\xpsrchvw.exe
2017-10-13 22:45:55 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-13 22:45:55 ----A---- C:\Windows\system32\CertEnrollUI.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\usocore.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\MusNotification.exe
2017-10-13 22:45:54 ----A---- C:\Windows\system32\mfps.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\EmailApis.dll
2017-10-13 22:45:54 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-13 22:45:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-13 22:45:52 ----A---- C:\Windows\system32\mfnetcore.dll
2017-10-13 22:45:52 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2017-10-13 22:45:52 ----A---- C:\Windows\system32\ChatApis.dll
2017-10-13 22:45:52 ----A---- C:\Windows\system32\efswrt.dll
2017-10-13 22:45:51 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-10-13 22:45:51 ----A---- C:\Windows\system32\Windows.Devices.Sensors.dll
2017-10-13 22:45:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-10-13 22:45:50 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2017-10-13 22:45:50 ----A---- C:\Windows\system32\updatehandlers.dll
2017-10-13 22:45:50 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-13 22:45:49 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-10-13 22:45:49 ----A---- C:\Windows\system32\mstsc.exe
2017-10-13 22:45:48 ----A---- C:\Windows\system32\Windows.Media.dll
2017-10-13 22:45:48 ----A---- C:\Windows\system32\mfcore.dll
2017-10-13 22:45:47 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-13 22:45:47 ----A---- C:\Windows\system32\drivers\WdiWiFi.sys
2017-10-13 22:45:46 ----A---- C:\Windows\system32\mstscax.dll
2017-10-13 22:45:46 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-13 22:45:45 ----A---- C:\Windows\system32\wuuhext.dll
2017-10-13 22:45:45 ----A---- C:\Windows\system32\Unistore.dll
2017-10-13 22:45:45 ----A---- C:\Windows\system32\AboveLockAppHost.dll
2017-10-13 22:45:44 ----A---- C:\Windows\system32\windows.storage.dll
2017-10-13 22:45:44 ----A---- C:\Windows\system32\TpmCoreProvisioning.dll
2017-10-13 22:45:43 ----A---- C:\Windows\system32\shell32.dll
2017-10-13 22:45:40 ----A---- C:\Windows\system32\TSWorkspace.dll
2017-10-13 22:45:40 ----A---- C:\Windows\system32\ngcsvc.dll
2017-10-13 22:45:40 ----A---- C:\Windows\system32\NgcCtnrSvc.dll
2017-10-13 22:45:40 ----A---- C:\Windows\system32\cryptngc.dll
2017-10-13 22:45:39 ----A---- C:\Windows\system32\wlansec.dll
2017-10-13 22:45:39 ----A---- C:\Windows\system32\VCardParser.dll
2017-10-13 22:45:39 ----A---- C:\Windows\system32\ucrtbase.dll
2017-10-13 22:45:39 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-13 22:45:39 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-13 22:45:39 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-13 22:45:38 ----A---- C:\Windows\system32\umrdp.dll
2017-10-13 22:45:38 ----A---- C:\Windows\system32\termsrv.dll
2017-10-13 22:45:38 ----A---- C:\Windows\system32\sspicli.dll
2017-10-13 22:45:38 ----A---- C:\Windows\system32\puiobj.dll
2017-10-13 22:45:38 ----A---- C:\Windows\system32\NgcCtnr.dll
2017-10-13 22:45:38 ----A---- C:\Windows\system32\lsass.exe
2017-10-13 22:45:37 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-13 22:45:37 ----A---- C:\Windows\system32\RDXTaskFactory.dll
2017-10-13 22:45:37 ----A---- C:\Windows\system32\ngccredprov.dll
2017-10-13 22:45:28 ----A---- C:\Windows\system32\wksprt.exe
2017-10-13 22:45:28 ----A---- C:\Windows\system32\ngcpopkeysrv.dll
2017-10-13 22:45:28 ----A---- C:\Windows\system32\drivers\npfs.sys
2017-10-13 22:45:28 ----A---- C:\Windows\system32\AppointmentActivation.dll
2017-10-13 22:45:26 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-10-13 22:45:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-10-13 22:45:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-10-13 22:45:21 ----A---- C:\Windows\system32\jscript9.dll
2017-10-13 22:45:21 ----A---- C:\Windows\system32\Chakradiag.dll
2017-10-13 22:45:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-10-13 22:45:20 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-10-13 22:45:19 ----A---- C:\Windows\system32\urlmon.dll
2017-10-13 22:45:19 ----A---- C:\Windows\system32\netshell.dll
2017-10-13 22:45:18 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-13 22:45:18 ----A---- C:\Windows\system32\Chakra.dll
2017-10-13 22:45:17 ----A---- C:\Windows\system32\ieframe.dll
2017-10-13 22:45:16 ----A---- C:\Windows\system32\win32kbase.sys
2017-10-13 22:45:16 ----A---- C:\Windows\system32\drivers\rdbss.sys
2017-10-13 22:45:16 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-13 22:45:15 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2017-10-13 22:45:15 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-10-13 22:45:15 ----A---- C:\Windows\system32\PlayToDevice.dll
2017-10-13 22:45:15 ----A---- C:\Windows\system32\mshtml.dll
2017-10-13 22:45:15 ----A---- C:\Windows\system32\dnsrslvr.dll
2017-10-13 22:45:13 ----A---- C:\Windows\system32\wininet.dll
2017-10-13 22:45:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-13 22:45:11 ----A---- C:\Windows\system32\StructuredQuery.dll
2017-10-13 22:45:11 ----A---- C:\Windows\system32\shutdownux.dll
2017-10-13 22:45:11 ----A---- C:\Windows\system32\msdtctm.dll
2017-10-13 22:45:11 ----A---- C:\Windows\system32\MCRecvSrc.dll
2017-10-13 22:45:11 ----A---- C:\Windows\system32\dnsapi.dll
2017-10-13 22:45:10 ----A---- C:\Windows\system32\Windows.Web.Http.dll
2017-10-13 22:45:10 ----A---- C:\Windows\system32\Windows.Networking.dll
2017-10-13 22:45:10 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-10-13 22:45:10 ----A---- C:\Windows\system32\twinui.appcore.dll
2017-10-13 22:45:09 ----A---- C:\Windows\system32\Windows.Web.dll
2017-10-13 22:45:09 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-10-13 22:45:09 ----A---- C:\Windows\system32\msftedit.dll
2017-10-13 22:45:09 ----A---- C:\Windows\system32\aadcloudap.dll
2017-10-13 22:45:08 ----A---- C:\Windows\system32\edgehtml.dll
2017-10-13 22:45:04 ----A---- C:\Windows\system32\wlidsvc.dll
2017-10-13 22:45:04 ----A---- C:\Windows\system32\RDXService.dll
2017-10-13 22:45:03 ----A---- C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-10-13 22:45:03 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-10-13 22:45:03 ----A---- C:\Windows\system32\aadtb.dll
2017-10-13 22:45:01 ----A---- C:\Windows\system32\dosvc.dll
2017-10-13 22:45:01 ----A---- C:\Windows\system32\domgmt.dll
2017-10-13 22:44:56 ----A---- C:\Windows\system32\CloudExperienceHost.dll
2017-10-13 22:44:55 ----A---- C:\Windows\system32\wwansvc.dll
2017-10-13 22:44:54 ----A---- C:\Windows\system32\tpmvsc.dll
2017-10-13 22:44:50 ----A---- C:\Windows\system32\jscript.dll
2017-10-13 22:44:50 ----A---- C:\Windows\system32\dmcmnutils.dll
2017-10-13 22:44:50 ----A---- C:\Windows\system32\dinput8.dll
2017-10-13 22:44:48 ----A---- C:\Windows\system32\SyncSettings.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\ChxHAPDS.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\ChxAPDS.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\ChtHkStrokeDS.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\ChtCangjieDS.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\dinput.dll
2017-10-13 22:44:45 ----A---- C:\Windows\system32\comuid.dll
2017-10-13 22:44:44 ----A---- C:\Windows\system32\StaticDictDS.dll
2017-10-13 22:44:44 ----A---- C:\Windows\system32\msimeChsPinyinMainDS.dll
2017-10-13 22:44:44 ----A---- C:\Windows\system32\jpndecoder.dll
2017-10-13 22:44:44 ----A---- C:\Windows\system32\ChtQuickDS.dll
2017-10-13 22:44:44 ----A---- C:\Windows\system32\ChsStrokeDS.dll
2017-10-13 22:44:43 ----A---- C:\Windows\system32\trie.dll
2017-10-13 22:44:43 ----A---- C:\Windows\system32\jpnranker.dll
2017-10-13 22:44:43 ----A---- C:\Windows\system32\chxinputrouter.dll
2017-10-13 22:44:43 ----A---- C:\Windows\system32\ChsPinyinRanker.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\VocabRoamingHandler.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\RuleBasedDS.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\MTFSpellcheckDS.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\MTFFuzzyDS.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\MtfDecoder.dll
2017-10-13 22:44:42 ----A---- C:\Windows\system32\chxranker.dll
2017-10-13 22:44:41 ----A---- C:\Windows\system32\TransliterationRanker.dll
2017-10-13 22:44:41 ----A---- C:\Windows\system32\jpninputrouter.dll
2017-10-13 22:44:41 ----A---- C:\Windows\system32\EmojiDS.dll
2017-10-13 22:44:40 ----A---- C:\Windows\system32\IHDS.dll
2017-10-13 22:44:38 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-10-13 22:44:37 ----A---- C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-10-13 22:44:37 ----A---- C:\Windows\system32\TpmTasks.dll
2017-10-13 22:44:37 ----A---- C:\Windows\system32\PCPTpm12.dll
2017-10-13 22:44:37 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2017-10-13 22:44:36 ----A---- C:\Windows\system32\CertEnroll.dll
2017-10-13 22:44:36 ----A---- C:\Windows\system32\AppReadiness.dll
2017-10-13 22:44:35 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2017-10-13 22:44:35 ----A---- C:\Windows\system32\UserDeviceRegistration.dll
2017-10-13 22:44:35 ----A---- C:\Windows\system32\mispace.dll
2017-10-13 22:44:35 ----A---- C:\Windows\system32\enterprisecsps.dll
2017-10-13 22:44:35 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-10-13 22:44:34 ----A---- C:\Windows\system32\offlinesam.dll
2017-10-13 22:44:34 ----A---- C:\Windows\system32\msxml6.dll
2017-10-13 22:44:34 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-13 22:44:32 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2017-10-13 22:44:30 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2017-10-13 22:44:30 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2017-10-13 22:44:29 ----A---- C:\Windows\system32\UserMgrProxy.dll
2017-10-13 22:44:28 ----A---- C:\Windows\system32\sppobjs.dll
2017-10-13 22:44:27 ----A---- C:\Windows\system32\wuaueng.dll
2017-10-13 22:44:27 ----A---- C:\Windows\system32\WsmSvc.dll
2017-10-13 22:44:27 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2017-10-13 22:44:26 ----A---- C:\Windows\system32\win32kfull.sys
2017-10-13 22:44:25 ----A---- C:\Windows\system32\SettingSyncCore.dll
2017-10-13 22:44:24 ----A---- C:\Windows\system32\wsp_health.dll
2017-10-13 22:44:21 ----A---- C:\Windows\system32\samsrv.dll
2017-10-13 22:44:21 ----A---- C:\Windows\system32\kerberos.dll
2017-10-13 22:44:21 ----A---- C:\Windows\system32\gdi32full.dll
2017-10-13 22:44:20 ----A---- C:\Windows\system32\wsp_fs.dll
2017-10-13 22:44:20 ----A---- C:\Windows\system32\twinui.dll
2017-10-13 22:44:19 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-13 22:44:15 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-13 22:44:14 ----A---- C:\Windows\system32\appraiser.dll
2017-10-13 22:44:13 ----A---- C:\Windows\system32\daxexec.dll
2017-10-13 22:44:13 ----A---- C:\Windows\system32\apprepsync.dll
2017-10-13 22:44:13 ----A---- C:\Windows\system32\apprepapi.dll
2017-10-13 22:44:12 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-13 22:44:12 ----A---- C:\Windows\system32\drivers\cng.sys
2017-10-13 22:44:11 ----A---- C:\Windows\system32\msctf.dll
2017-10-13 22:44:11 ----A---- C:\Windows\system32\dsreg.dll
2017-10-13 22:44:10 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2017-10-13 22:44:10 ----A---- C:\Windows\system32\MPSSVC.dll
2017-10-13 22:44:09 ----A---- C:\Windows\system32\winsrv.dll
2017-10-13 22:44:09 ----A---- C:\Windows\system32\scksp.dll
2017-10-13 22:44:09 ----A---- C:\Windows\system32\basecsp.dll
2017-10-13 22:44:08 ----A---- C:\Windows\system32\winhttp.dll
2017-10-13 22:44:08 ----A---- C:\Windows\system32\webio.dll
2017-10-13 22:44:08 ----A---- C:\Windows\system32\user32.dll
2017-10-13 22:44:08 ----A---- C:\Windows\system32\acmigration.dll
2017-10-13 22:44:07 ----A---- C:\Windows\system32\wuauclt.exe
2017-10-13 22:44:07 ----A---- C:\Windows\system32\Wldap32.dll
2017-10-13 22:44:07 ----A---- C:\Windows\system32\mcbuilder.exe
2017-10-13 22:44:07 ----A---- C:\Windows\system32\certutil.exe
2017-10-13 22:44:06 ----A---- C:\Windows\system32\netprofmsvc.dll
2017-10-13 22:44:06 ----A---- C:\Windows\system32\netlogon.dll
2017-10-13 22:44:05 ----A---- C:\Windows\system32\RjvMDMConfig.dll
2017-10-13 22:44:04 ----A---- C:\Windows\system32\AppContracts.dll
2017-10-13 22:44:03 ----A---- C:\Windows\system32\TabSvc.dll
2017-10-13 22:44:03 ----A---- C:\Windows\system32\t2embed.dll
2017-10-13 22:44:03 ----A---- C:\Windows\system32\dsregcmd.exe
2017-10-13 22:44:03 ----A---- C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-10-13 22:44:02 ----A---- C:\Windows\system32\netprofm.dll
2017-10-13 22:44:02 ----A---- C:\Windows\system32\MSWB7.dll
2017-10-13 22:44:02 ----A---- C:\Windows\system32\certreq.exe
2017-10-13 22:44:02 ----A---- C:\Windows\system32\authz.dll
2017-10-13 22:44:01 ----A---- C:\Windows\system32\FirewallAPI.dll
2017-10-01 17:00:29 ----D---- C:\Program Files (x86)\astragon Entertainment GmbH
2017-09-30 18:54:18 ----A---- C:\Windows\system32\nvdispgenco6438569.dll
2017-09-30 18:54:18 ----A---- C:\Windows\system32\nvdispco6438569.dll
2017-09-29 18:09:34 ----D---- C:\Program Files (x86)\Wapp
2017-09-29 10:20:23 ----AD---- C:\Program Files\rempl

====== List of files/folders modified in the last 1 month ======

2017-10-17 15:16:58 ----RD---- C:\Program Files
2017-10-17 15:16:54 ----D---- C:\Windows\Prefetch
2017-10-17 15:13:28 ----D---- C:\Program Files (x86)\Steam
2017-10-17 15:12:50 ----D---- C:\Windows\Temp
2017-10-17 15:06:58 ----D---- C:\Windows
2017-10-17 15:01:00 ----D---- C:\Windows\system32\sru
2017-10-17 14:03:36 ----D---- C:\ProgramData\NVIDIA
2017-10-17 14:00:44 ----D---- C:\Windows\system32\SleepStudy
2017-10-17 08:16:13 ----D---- C:\Windows\SoftwareDistribution
2017-10-16 22:35:34 ----RD---- C:\Windows\Microsoft.NET
2017-10-16 00:18:16 ----D---- C:\Windows\SysWOW64
2017-10-16 00:18:09 ----D---- C:\Windows\system32\Macromed
2017-10-16 00:18:08 ----D---- C:\Windows\SYSWOW64\Macromed
2017-10-15 22:24:21 ----RD---- C:\Program Files (x86)
2017-10-15 20:07:25 ----D---- C:\Windows\INF
2017-10-15 19:06:24 ----SHD---- C:\System Volume Information
2017-10-15 17:21:27 ----D---- C:\Windows\system32\catroot2
2017-10-15 17:15:55 ----D---- C:\Windows\System32
2017-10-15 17:15:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-15 17:13:19 ----D---- C:\Windows\system32\drivers
2017-10-15 17:13:18 ----D---- C:\Windows\system32\DriverStore
2017-10-15 17:13:18 ----D---- C:\Windows\system32\CatRoot
2017-10-15 17:11:15 ----D---- C:\Program Files\NVIDIA Corporation
2017-10-15 17:11:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-10-15 00:09:14 ----D---- C:\Windows\AppReadiness
2017-10-14 17:55:09 ----D---- C:\ProgramData\TruckersMP
2017-10-14 15:43:31 ----RSD---- C:\Windows\assembly
2017-10-14 13:32:18 ----D---- C:\Windows\rescache
2017-10-14 09:57:49 ----D---- C:\Windows\system32\config
2017-10-14 09:49:21 ----D---- C:\Windows\WinSxS
2017-10-14 09:48:08 ----D---- C:\Windows\system32\LogFiles
2017-10-14 01:23:13 ----D---- C:\Windows\SYSWOW64\en-US
2017-10-14 01:23:12 ----D---- C:\Windows\system32\oobe
2017-10-14 01:23:12 ----D---- C:\Windows\system32\en-US
2017-10-14 01:23:11 ----RD---- C:\Windows\ImmersiveControlPanel
2017-10-14 01:23:11 ----D---- C:\Windows\ShellExperiences
2017-10-14 01:23:11 ----D---- C:\Windows\AppPatch
2017-10-14 01:23:11 ----D---- C:\Program Files\Windows Mail
2017-10-14 01:23:11 ----D---- C:\Program Files (x86)\Windows Mail
2017-10-14 01:12:51 ----D---- C:\Windows\debug
2017-10-13 23:14:58 ----D---- C:\Windows\CbsTemp
2017-10-13 22:56:27 ----D---- C:\Windows\system32\MRT
2017-10-13 22:50:21 ----AC---- C:\Windows\system32\MRT.exe
2017-10-13 21:51:05 ----D---- C:\Windows\Logs
2017-10-13 21:46:46 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2017-10-13 21:45:41 ----HD---- C:\Program Files\WindowsApps
2017-10-13 21:44:16 ----SHD---- C:\Windows\Installer
2017-10-13 21:44:15 ----SHD---- C:\Config.Msi
2017-10-06 15:35:55 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2017-10-06 15:35:55 ----A---- C:\Windows\system32\nvapi64.dll
2017-10-06 14:17:16 ----A---- C:\Windows\NvContainerRecovery.bat
2017-10-06 13:44:54 ----A---- C:\Windows\system32\nvsvc64.dll
2017-10-06 13:44:54 ----A---- C:\Windows\system32\nvcpl.dll
2017-10-06 13:44:52 ----A---- C:\Windows\system32\nvsvcr.dll
2017-10-06 13:44:52 ----A---- C:\Windows\system32\nvshext.dll
2017-10-06 13:44:52 ----A---- C:\Windows\system32\nvmctray.dll
2017-10-06 13:44:52 ----A---- C:\Windows\system32\nv3dappshextr.dll
2017-10-06 13:44:52 ----A---- C:\Windows\system32\nv3dappshext.dll
2017-10-01 17:28:00 ----D---- C:\Users\Lukes_CZ\AppData\Roaming\uTorrent
2017-09-23 13:38:42 ----D---- C:\ProgramData\NVIDIA Corporation
2017-09-23 13:37:55 ----D---- C:\Windows\system32\Tasks
2017-09-21 00:54:41 ----AD---- C:\Program Files\CCleaner
2017-09-19 22:57:29 ----D---- C:\Users\Lukes_CZ\AppData\Roaming\Clip2Net
2017-09-19 09:23:48 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2017-09-19 09:23:48 ----A---- C:\Windows\system32\nvspcap64.dll
2017-09-19 09:23:48 ----A---- C:\Windows\system32\nvspbridge64.dll
2017-09-19 09:23:47 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2017-09-19 09:23:47 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2017-09-19 09:23:43 ----A---- C:\Windows\system32\nvaudcap64v.dll
2017-09-19 09:23:42 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2017-09-18 23:29:50 ----A---- C:\Windows\NvTelemetryContainerRecovery.bat

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\Windows\system32\drivers\iorate.sys [2016-11-02 48992]
R0 MBI;@oem16.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\Windows\System32\drivers\MBI.sys [2015-11-20 41464]
R1 MpKsl99b10c71;MpKsl99b10c71; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3A96C5F2-AD1D-48A0-AE1B-AE27138DAE15}\MpKsl99b10c71.sys [2017-10-13 58120]
R1 MpKsldfc4288f;MpKsldfc4288f; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{769F27E7-B3B5-4EE2-A476-41AEBDE9CBA8}\MpKsldfc4288f.sys [2017-10-17 58120]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2016-07-16 70144]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\System32\drivers\athw8x.sys [2016-07-16 4233728]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2015-08-12 601624]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\drivers\BTHUSB.sys [2016-08-20 84992]
R3 HIDSwitch;@oem2.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\Windows\System32\drivers\AsHIDSwitch64.sys [2015-08-20 27872]
R3 iwdbus;@oem15.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_d0c9e4f4745227f9\nvlddmkm.sys [2017-10-10 16923064]
R3 nvvad_WaveExtensible;@oem59.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-08-18 48064]
R3 nvvhci;@oem6.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\Windows\System32\drivers\nvvhci.sys [2017-10-06 57792]
R3 RSBASTOR;@oem12.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\Windows\system32\DRIVERS\RtsBaStor.sys [2015-07-08 321792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2016-07-16 589824]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2016-07-16 12800]
R3 TXEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [2015-06-26 146232]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2017-06-21 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 ATP;@oem6.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\Windows\System32\drivers\AsusTP.sys [2015-12-14 98296]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2016-08-20 114176]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\BthLEEnum.sys [2017-07-12 250880]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2017-07-07 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\drivers\BTHport.sys [2017-04-28 967680]
S3 dg_ssudbus;@oem57.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2017-05-18 131984]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 intaud_WaveExtensible;@oem14.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2015-12-01 50160]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2016-07-16 120320]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-09-19 30144]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\System32\drivers\rfcomm.sys [2016-07-16 183808]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\Windows\System32\drivers\scmdisk0101.sys [2017-07-12 124928]
S3 ssudmdm;@oem55.inf,%ssud.Service.Name%;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2017-05-18 166288]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\Windows\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-08-23 2257016]
R2 CDPUserSvc_31b0533;CDPUserSvc_31b0533; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-05-04 337888]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19 512960]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-10-06 462968]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-09-19 449984]
R2 OneSyncSvc_31b0533;Hostitel synchronizace_31b0533; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
R2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-07-26 3148128]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2017-01-26 76888]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-07-22 754784]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-10-14 1641248]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_31b0533;Služba zasílání zpráv_31b0533; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19 512960]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-07-26 2168672]
S3 PimIndexMaintenanceSvc_31b0533;Data kontaktů_31b0533; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 18 říj 2017 17:52

Zdravím!
Log vypadá OK.

VIRY.CZ

Prosím o preventivní kontrolu

Prosím o preventivní kontrolu

Re: Prosím o preventivní kontrolu