Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

BSOD memory managment

V tomto fóru se řeší problematika modré smrti - BSOD

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zpráva
Autor
petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

BSOD memory managment

#1 Příspěvek od petersff »

Dobrý den, před pár dny, mi začala vyskakovat modrá smrt s chybou Memory managment, chyba vyskakuje náhodně ať už při prohlížení internetu nebo hraní her.. přikládám log. Díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by petrl at 2019-01-07 23:21:31
Microsoft Windows 10 Home
System drive C: has 100 GB (44%) free of 228 GB
Total RAM: 16339 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:21:31, on 07.01.2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
C:\Windows\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\petrl\AppData\Local\Google\Update\1.3.33.23\GoogleCrashHandler.exe
D:\Program Files (x86)\Steam\Steam.exe
C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe
C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe
C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\petrl\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\trend micro\petrl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hal3000.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://go.microsoft.com/fwlink/p/?Link ... id=UE01DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\petrl\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Google Update] C:\Users\petrl\AppData\Local\Google\Update\1.3.33.23\GoogleUpdateCore.exe
O4 - HKCU\..\Run: [Steam] "D:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [TSMApplication] "D:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe"
O4 - HKCU\..\Run: [Gyazo] C:\Program Files (x86)\Gyazo\GyStation.exe
O4 - HKCU\..\Run: [Track-o-Bot] "D:\Program Files (x86)\Track-o-Bot\Track-o-Bot.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "D:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Hearthstone Deck Tracker] "C:\Users\petrl\AppData\Local\HearthstoneDeckTracker\Update.exe" --processStart "HearthstoneDeckTracker.exe"
O4 - HKCU\..\Run: [EPSON Stylus DX4000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIBEE.EXE /FU "C:\Windows\TEMP\E_S44E5.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [EvolveClient] "D:\Program Files\Echobit\Evolve\EvolveClient.exe" -autorun
O4 - HKCU\..\Run: [WallpaperEngine] "D:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe" -silent
O4 - HKCU\..\Run: [Battle.net] "D:\Program Files (x86)\Battle.net\Battle.net.exe" --autostarted
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Discord] C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Windows\SysWOW64\muachost.exe /RestartByRestartManager:2FDC73DB-90C4-4270-BCD9-A2A425032C2A /RestartByRestartManager:DF256E78-866B-4840-85A3-61249C1E0872 /RestartByRestartManager:B0FB54C4-F95B-4edf-8D39-BE65784396B1 /RestartByRestartManager:2136DB18-8678-422b-BD98-FE67875FB44D
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - Global Startup: Avast SecureLine.lnk = D:\Program Files\AVAST Software\SecureLine\Vpn.exe
O4 - Global Startup: SteelSeries Engine 3.lnk = C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{0e2f19d7-c553-4e0f-9c64-22c5089b1784}: NameServer = 100.120.144.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Evolve Service (EvoSvc) - Echobit LLC - D:\Program Files\Echobit\Evolve\EvoSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garena platform service (GarenaPlatform) - Garena Online - D:\Program Files (x86)\Garena\Garena\2.0.1811.2302\gxxsvc.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MysticLight2_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Avast SecureLine (SecureLine) - Unknown owner - D:\Program Files\AVAST Software\SecureLine\VpnSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 12372 bytes

======Listing Processes======








winlogon.exe

C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s gpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
"D:\Program Files (x86)\Garena\Garena\2.0.1811.2302\gxxsvc.exe" run
C:\WINDOWS\system32\svchost.exe -k LocalService -p
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k appmodel -p -s camsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s NcdAutoSetup
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
"C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe"
C:\Windows\SysWOW64\muachost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc

"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
dashost.exe {3d5c2836-0484-4611-801e7514ab3c80c6}
c:\windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%dSPUser.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\SPUser" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker


c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
C:\WINDOWS\Explorer.EXE

"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca
c:\windows\system32\svchost.exe -k netsvcs -p
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe"
"C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=gpu-process --disable-features=AsyncWheelEvents,SurfaceSynchronization --no-sandbox --log-file="C:\Users\petrl\AppData\Local\NVIDIA Corporation\NVIDIA Share\debug.log" --lang=en-US --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --log-file="C:\Users\petrl\AppData\Local\NVIDIA Corporation\NVIDIA Share\debug.log" --lang=en-US --service-request-channel-token=FB7FCE3FF0570A90B4A38BC4A7652CD0 --mojo-platform-channel-handle=1692 /prefetch:2
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --no-sandbox --disable-features=AsyncWheelEvents,SurfaceSynchronization --service-pipe-token=EFF73738A67A65590A76DD602CFA9A1B --lang=en-US --log-file="C:\Users\petrl\AppData\Local\NVIDIA Corporation\NVIDIA Share\debug.log" --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=EFF73738A67A65590A76DD602CFA9A1B --renderer-client-id=3 --mojo-platform-channel-handle=1900 /prefetch:1
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Users\petrl\AppData\Local\Google\Update\1.3.33.23\GoogleCrashHandler.exe"
"C:\Users\petrl\AppData\Local\Google\Update\1.3.33.23\GoogleCrashHandler64.exe"
"D:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe"
"C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe" --type=gpu-process --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,19,20,23,40,71 --gpu-vendor-id=0x10de --gpu-device-id=0x1b82 --gpu-driver-vendor=NVIDIA --gpu-driver-version=25.21.14.1735 --gpu-driver-date=12-11-2018 --service-request-channel-token=485580D337809993145C6E9A363A987D --mojo-platform-channel-handle=1572 /prefetch:2
"C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe" --type=renderer --no-sandbox --primordial-pipe-token=9049D28EA4149BF54C9CF49BF95312D4 --lang=cs --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\petrl\AppData\Local\Discord\app-0.0.301\resources\app.asar" --node-integration=false --preload="C:\Users\petrl\AppData\Roaming\discord\0.0.301\modules\discord_desktop_core\core.asar\app\mainScreenPreload.js" --background-color=#2f3136 --enable-blink-features=EnumerateDevices,AudioOutputDevices --hidden-page --enable-pinch --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=9049D28EA4149BF54C9CF49BF95312D4 --renderer-client-id=6 --mojo-platform-channel-handle=2484 /prefetch:1
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\WINDOWS\system32\AUDIODG.EXE 0x7e0
c:\windows\system32\svchost.exe -k netsvcs -p -s XblAuthManager
"D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\petrl\AppData\Local\Steam\htmlcache" "-steampid=11132" "-buildid=1544834093" "-steamid=0" "-steamuniverse=Dev" "-clientui=D:\Program Files (x86)\Steam\clientui" --disable-spell-checking --disable-out-of-process-pac --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-features=TouchpadAndWheelScrollLatching,AsyncWheelEvents --enable-media-stream --disable-smooth-scrolling --num-raster-threads=4 --enable-direct-write "--log-file=D:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=D:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\petrl\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1544834093 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2e8,0x2fc,0x7ff9aa951f78,0x7ff9aa951f88,0x7ff9aa951f98
"D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --log-file="D:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1544834093 --steamid=0 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --log-file="D:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --buildid=1544834093 --steamid=0 --service-request-channel-token=40B2ED4735FC998F43AD4D0A2C57ACA9 --mojo-platform-channel-handle=1280 --ignored=" --type=renderer " /prefetch:2
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe" /InvokerPRAID: App
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s QWAVE
"D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=AD03E87A28225610BD3BBD8E226752A2 --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="D:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --disable-spell-checking --buildid=1544834093 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=AD03E87A28225610BD3BBD8E226752A2 --renderer-client-id=4 --mojo-platform-channel-handle=1788 /prefetch:1
"D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=DBEA88E6FF5607075A3358BA07306619 --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="D:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --disable-spell-checking --buildid=1544834093 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=DBEA88E6FF5607075A3358BA07306619 --renderer-client-id=5 --mojo-platform-channel-handle=2364 /prefetch:1
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\rempl\sedsvc.exe"

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
C:\Users\petrl\AppData\Local\Google\Update\GoogleUpdate.exe /c
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe --type=crashpad-handler "--user-data-dir=C:\Users\petrl\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\petrl\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\petrl\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=71.0.3578.98 --initial-client-data=0x1d4,0x1d8,0x1dc,0x1d0,0x1e0,0x7ff9b9f464d0,0x7ff9b9f464e0,0x7ff9b9f464f0
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4728 --on-initialized-event-handle=656 --parent-handle=660 /prefetch:6
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=15112941691927417887 --mojo-platform-channel-handle=1620 --ignored=" --type=renderer " /prefetch:2
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=1400287795332107092 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=1400287795332107092 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=841921055910793925 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=841921055910793925 --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3084 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=8390194297717324691 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=8390194297717324691 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3580 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=10490194581517208797 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=10490194581517208797 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3768 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=7959540947420357718 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=7959540947420357718 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3904 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=5971933531981370336 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=5971933531981370336 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9684 /prefetch:1
"D:\Program Files\DAEMON Tools Lite\DTShellHlp.exe"
"D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=198940837741271196 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=198940837741271196 --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9920 /prefetch:1
"C:\Users\petrl\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,4348901306863526469,12298875175565756546,131072 --disable-features=NativeNotifications --service-pipe-token=5106460610191301087 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --service-request-channel-token=5106460610191301087 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7252 /prefetch:1
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Stahování\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\MSILEDKeeper_Host.job - C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_191\bin\ssv.dll [2018-10-28 582008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-28 245112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2017-11-15 9235936]
"Zygor Guides Client"=D:\Users\petrl\Documents\Zygor Guides Client\startup.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\petrl\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-12-20 1543264]
"Google Update"=C:\Users\petrl\AppData\Local\Google\Update\1.3.33.23\GoogleUpdateCore.exe [2018-12-17 605992]
"Steam"=D:\Program Files (x86)\Steam\steam.exe [2018-12-14 3133216]
"TSMApplication"=D:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe [2018-08-01 1623040]
"Gyazo"=C:\Program Files (x86)\Gyazo\GyStation.exe [2018-10-04 1384840]
"Track-o-Bot"=D:\Program Files (x86)\Track-o-Bot\Track-o-Bot.exe [2017-12-27 3239936]
"DAEMON Tools Lite Automount"=D:\Program Files\DAEMON Tools Lite\DTAgent.exe [2018-03-21 729704]
"Hearthstone Deck Tracker"=C:\Users\petrl\AppData\Local\HearthstoneDeckTracker\Update.exe [2018-03-21 1803040]
"EPSON Stylus DX4000"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIBEE.EXE [2007-10-09 213504]
"EvolveClient"=D:\Program Files\Echobit\Evolve\EvolveClient.exe [2018-05-05 3334528]
"WallpaperEngine"=D:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [2018-12-12 1698296]
"Battle.net"=D:\Program Files (x86)\Battle.net\Battle.net.exe [2018-12-15 1097192]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2018-09-19 18594760]
"Discord"=C:\Users\petrl\AppData\Local\Discord\app-0.0.301\Discord.exe [2018-04-30 57816920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #0"=C:\Windows\SysWOW64\muachost.exe [2015-08-18 1692840]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2018-01-15 596664]
"GrooveMonitor"=D:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2018-10-06 601424]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Avast SecureLine.lnk - D:\Program Files\AVAST Software\SecureLine\Vpn.exe
SteelSeries Engine 3.lnk - C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-01-07 23:19:32 ----D---- C:\rsit
2019-01-07 23:19:32 ----D---- C:\Program Files\trend micro
2018-12-31 04:52:16 ----D---- C:\ProgramData\Riot Games
2018-12-31 04:52:04 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2018-12-31 04:52:03 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2018-12-31 04:52:03 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2018-12-29 00:56:44 ----D---- C:\Users\petrl\AppData\Roaming\Battlestate Games
2018-12-29 00:56:44 ----D---- C:\ProgramData\Battlestate Games
2018-12-29 00:54:00 ----SHD---- C:\Config.Msi
2018-12-26 11:43:24 ----D---- C:\ProgramData\Path of Building
2018-12-23 17:57:58 ----A---- C:\WINDOWS\system32\drivers\aswTap.sys
2018-12-23 17:57:57 ----D---- C:\ProgramData\AVAST Software
2018-12-23 09:46:09 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo-1-999-0-0-0.exe
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1-999-0-0-0.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\OpenCL.dll
2018-12-23 09:43:11 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFThevc.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvmcumd.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvEncMFThevc.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvdispgenco6441735.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvdispco6441735.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvcuda.dll
2018-12-23 09:43:10 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2018-12-19 20:33:33 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-12-19 20:33:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-12-19 20:33:22 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-12-19 20:33:22 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-12-19 20:33:22 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-12-19 20:33:22 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-12-19 20:33:21 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-12-19 20:33:21 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-12-19 20:33:21 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-12-19 20:33:21 ----A---- C:\WINDOWS\system32\d2d1.dll
2018-12-19 20:33:21 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-12-19 20:33:20 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\winresume.exe
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\winload.exe
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\jscript.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-12-19 20:33:20 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-12-19 20:33:19 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-12-19 20:33:19 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-12-19 20:33:19 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-12-19 20:33:19 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2018-12-19 20:33:19 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-12-12 17:31:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-12-12 17:31:10 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-12-12 17:31:05 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-12-12 17:31:04 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-12-12 17:31:04 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-12-12 17:31:04 ----A---- C:\WINDOWS\system32\wininet.dll
2018-12-12 17:31:04 ----A---- C:\WINDOWS\system32\shell32.dll
2018-12-12 17:31:03 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-12-12 17:31:03 ----A---- C:\WINDOWS\system32\ClipUp.exe
2018-12-12 17:31:02 ----A---- C:\WINDOWS\system32\StartTileData.dll
2018-12-12 17:31:01 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-12-12 17:31:01 ----A---- C:\WINDOWS\system32\sppobjs.dll
2018-12-12 17:31:00 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-12-12 17:31:00 ----A---- C:\WINDOWS\system32\cdp.dll
2018-12-12 17:30:59 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-12-12 17:30:59 ----A---- C:\WINDOWS\system32\wmp.dll
2018-12-12 17:30:58 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2018-12-12 17:30:58 ----A---- C:\WINDOWS\system32\mos.dll
2018-12-12 17:30:58 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-12-12 17:30:57 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-12-12 17:30:57 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-12-12 17:30:56 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\system32\twinui.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\system32\tquery.dll
2018-12-12 17:30:56 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-12-12 17:30:55 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-12-12 17:30:55 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2018-12-12 17:30:53 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\OpcServices.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\mssrch.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-12-12 17:30:53 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-12-12 17:30:52 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-12-12 17:30:52 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\dosvc.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-12-12 17:30:52 ----A---- C:\WINDOWS\system32\BingMaps.dll
2018-12-12 17:30:51 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2018-12-12 17:30:51 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-12-12 17:30:51 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-12-12 17:30:51 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2018-12-12 17:30:51 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-12-12 17:30:50 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-12-12 17:30:50 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-12-12 17:30:49 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-12-12 17:30:49 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-12-12 17:30:49 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-12-12 17:30:49 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-12-12 17:30:48 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-12-12 17:30:48 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2018-12-12 17:30:48 ----A---- C:\WINDOWS\system32\lpasvc.dll
2018-12-12 17:30:48 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2018-12-12 17:30:47 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-12-12 17:30:46 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-12-12 17:30:45 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2018-12-12 17:30:45 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2018-12-12 17:30:44 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-12-12 17:30:43 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-12-12 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-12-12 17:30:41 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-12-12 17:30:41 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-12-12 17:30:40 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2018-12-12 17:30:39 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-12-12 17:30:39 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2018-12-12 17:30:39 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\ShareHost.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\MapRouter.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-12-12 17:30:37 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\wlansvc.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\winhttp.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\NMAA.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\mf.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-12-12 17:30:36 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\MapsStore.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\BthAvctpSvc.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-12-12 17:30:35 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\wpx.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\wer.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\ninput.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\dnsapi.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\defragsvc.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\ci.dll
2018-12-12 17:30:34 ----A---- C:\WINDOWS\system32\BTAGService.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\WinSCard.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\rmclient.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\mfps.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\eeprov.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\drivers\fileinfo.sys
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\AppResolver.dll
2018-12-12 17:30:33 ----A---- C:\WINDOWS\system32\advapi32.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\AppResolver.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\SYSWOW64\AcSpecfc.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\weretw.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\webio.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\wc_storage.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\wbengine.exe
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\thumbcache.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\mssvp.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\hal.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\iorate.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\drivers\bindflt.sys
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\bthserv.dll
2018-12-12 17:30:32 ----A---- C:\WINDOWS\system32\appsruprov.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Diagnostics.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\fdBth.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\xbgmengine.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\wpnsruprov.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\t2embed.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\offreg.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\mssph.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\moshostcore.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\fdBth.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\energyprov.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\wcnfs.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\mmcss.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\browser_broker.exe
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\bcdedit.exe
2018-12-12 17:30:31 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\SYSWOW64\t2embed.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\RMapi.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\drivers\storqosflt.sys
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\domgmt.dll
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2018-12-12 17:30:30 ----A---- C:\WINDOWS\system32\DataUsageHandlers.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\SYSWOW64\winhttpcom.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\SYSWOW64\dtdump.exe
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\winhttpcom.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\utcutil.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\tzres.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\msscntrs.dll
2018-12-12 17:30:29 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-12-10 21:36:07 ----D---- C:\Users\petrl\AppData\Roaming\Guild Wars 2
2018-12-09 15:07:15 ----D---- C:\Users\petrl\AppData\Roaming\2K

======List of files/folders modified in the last 1 month======

2019-01-07 23:21:31 ----D---- C:\WINDOWS\Temp
2019-01-07 23:21:04 ----D---- C:\WINDOWS\Prefetch
2019-01-07 23:19:32 ----RD---- C:\Program Files
2019-01-07 23:17:55 ----HD---- C:\Program Files\WindowsApps
2019-01-07 23:17:55 ----D---- C:\WINDOWS\AppReadiness
2019-01-07 23:17:52 ----D---- C:\WINDOWS\System32
2019-01-07 23:17:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-07 23:17:51 ----D---- C:\WINDOWS\INF
2019-01-07 23:16:54 ----D---- C:\ProgramData\boost_interprocess
2019-01-07 23:14:45 ----D---- C:\ProgramData\NVIDIA
2019-01-07 23:12:19 ----D---- C:\Users\petrl\AppData\Roaming\HearthstoneDeckTracker
2019-01-07 23:12:13 ----D---- C:\Users\petrl\AppData\Roaming\discord
2019-01-07 23:11:52 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-01-07 23:11:45 ----D---- C:\WINDOWS\system32\SleepStudy
2019-01-05 13:23:00 ----D---- C:\WINDOWS\system32\sru
2019-01-05 07:10:29 ----D---- C:\WINDOWS\system32\LogFiles
2019-01-05 07:10:09 ----RD---- C:\WINDOWS\Microsoft.NET
2019-01-04 23:22:17 ----D---- C:\Users\petrl\AppData\Roaming\TS3Client
2019-01-04 22:59:43 ----SHD---- C:\System Volume Information
2019-01-04 21:19:44 ----D---- C:\ProgramData\Origin
2019-01-04 21:19:36 ----D---- C:\Users\petrl\AppData\Roaming\Origin
2019-01-04 21:19:28 ----D---- C:\Program Files (x86)\Origin Games
2019-01-04 21:07:39 ----D---- C:\Program Files (x86)\World of Warcraft
2019-01-04 16:05:10 ----D---- C:\WINDOWS\Logs
2019-01-04 14:13:55 ----SHD---- C:\WINDOWS\Installer
2019-01-04 14:13:47 ----D---- C:\WINDOWS\SysWOW64
2019-01-02 16:03:00 ----D---- C:\WINDOWS\LiveKernelReports
2019-01-01 11:09:32 ----D---- C:\WINDOWS\system32\config
2018-12-31 04:52:16 ----HD---- C:\ProgramData
2018-12-29 00:54:09 ----D---- C:\ProgramData\Package Cache
2018-12-25 06:04:30 ----D---- C:\WINDOWS\WinSxS
2018-12-25 06:04:10 ----D---- C:\WINDOWS\system32\catroot2
2018-12-25 06:02:25 ----D---- C:\Windows
2018-12-24 19:09:08 ----D---- C:\WINDOWS\system32\drivers
2018-12-24 19:09:08 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2018-12-23 17:58:27 ----D---- C:\WINDOWS\system32\DriverStore
2018-12-23 17:58:03 ----D---- C:\WINDOWS\system32\Tasks
2018-12-23 09:46:30 ----D---- C:\ProgramData\NVIDIA Corporation
2018-12-23 09:38:05 ----D---- C:\Program Files\NVIDIA Corporation
2018-12-22 13:42:57 ----SD---- C:\Users\petrl\AppData\Roaming\Microsoft
2018-12-20 19:56:16 ----HD---- C:\Program Files\Common Files\EAInstaller
2018-12-20 19:55:59 ----RSD---- C:\WINDOWS\assembly
2018-12-20 19:31:18 ----D---- C:\Program Files (x86)\Origin
2018-12-20 05:20:44 ----D---- C:\WINDOWS\TextInput
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\zu-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\yo-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\xh-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\wo-SN
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\tn-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\ti-ET
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\rw-RW
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\nso-ZA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\migration
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\ig-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\Boot
2018-12-20 05:20:44 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-12-20 05:20:44 ----D---- C:\WINDOWS\bcastdvr
2018-12-19 20:34:51 ----D---- C:\WINDOWS\CbsTemp
2018-12-17 07:12:52 ----A---- C:\WINDOWS\system32\nvapi64.dll
2018-12-17 00:28:59 ----D---- C:\Users\petrl\AppData\Roaming\obs-studio
2018-12-13 03:04:11 ----SD---- C:\WINDOWS\system32\DiagSvcs
2018-12-13 03:04:11 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-12-13 03:04:11 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-12-13 03:04:11 ----D---- C:\WINDOWS\system32\en-US
2018-12-13 03:04:11 ----D---- C:\WINDOWS\system32\cs-CZ
2018-12-13 03:04:11 ----D---- C:\WINDOWS\ShellComponents
2018-12-13 03:04:10 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-12-13 03:04:10 ----D---- C:\WINDOWS\apppatch
2018-12-12 17:35:18 ----D---- C:\WINDOWS\system32\MRT
2018-12-12 17:34:30 ----D---- C:\WINDOWS\debug
2018-12-12 17:34:26 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-12-12 04:44:29 ----D---- C:\WINDOWS\system32\drivers\wd
2018-12-12 04:44:24 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2018-12-11 12:00:32 ----A---- C:\WINDOWS\NvTelemetryContainerRecovery.bat
2018-12-11 08:08:37 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2018-12-11 08:08:37 ----A---- C:\WINDOWS\system32\nvcpl.dll
2018-12-11 08:08:35 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2018-12-11 08:08:35 ----A---- C:\WINDOWS\system32\nvshext.dll
2018-12-11 08:08:35 ----A---- C:\WINDOWS\system32\nvmctray.dll
2018-12-11 08:08:35 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2018-12-11 08:08:35 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2018-12-10 21:59:23 ----D---- C:\WINDOWS\SoftwareDistribution
2018-12-10 12:29:30 ----A---- C:\WINDOWS\NvContainerRecovery.bat

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-12-08 58168]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-07-14 414720]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-12-08 43008]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2017-07-19 45752]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2017-08-19 139704]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2018-12-08 82432]
R3 dtlitescsibus;@oem28.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2018-03-30 30264]
R3 dtliteusbbus;@oem34.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2018-03-30 47672]
R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i63x64.sys [2018-04-12 524800]
R3 EvolveVirtualAdapter;@oem5.inf,%EvolveVirtualAdapter.Service.DispName%;Evolve Virtual Miniport Driver; C:\WINDOWS\System32\drivers\evolve.sys [2018-05-05 21656]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2017-11-15 6038440]
R3 MEIx64;@oem14.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-09-06 204896]
R3 NTIOLib_MysticLight;NTIOLib_MysticLight; \??\C:\Program Files (x86)\MSI\MysticLight\Lib\NTIOLib_X64.sys [2017-07-10 14288]
R3 NVHDA;@oem15.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2018-11-13 227896]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e7b3660b4830c245\nvlddmkm.sys [2018-12-17 20424640]
R3 nvvad_WaveExtensible;@oem57.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2018-10-01 70024]
R3 nvvhci;@oem22.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2018-10-01 74576]
R3 rzendpt;@oem43.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2015-08-13 50392]
R3 rzudd;@oem41.inf,%Razer.SvcDesc%;Razer Mouse Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2015-08-13 202952]
R3 ssdevfactory;@oem45.inf,%ssdevfactory.SVCDESC%;SteelSeries Device Factory Service; C:\WINDOWS\System32\drivers\ssdevfactory.sys [2017-12-15 46896]
R3 sshid;@oem18.inf,%sshid.SvcDesc%;SteelSeries HID Service; C:\WINDOWS\System32\drivers\sshid.sys [2018-01-10 47944]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-08-03 128920]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2018-06-15 48544]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 aswTap;@oem25.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\WINDOWS\System32\drivers\aswTap.sys [2018-09-05 53904]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-12-08 92688]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-12-14 76088]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2018-10-25 30336]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2018-01-04 468752]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-06-15 945568]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_3a4a5;CDPUserSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 GarenaPlatform;Garena platform service; D:\Program Files (x86)\Garena\Garena\2.0.1811.2302\gxxsvc.exe [2018-11-22 315712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-09-14 177440]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-09-14 419616]
R2 MysticLight2_Service;MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [2017-09-07 30904]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06 787440]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2018-12-11 767016]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2018-12-11 649712]
R2 OneSyncSvc_3a4a5;OneSyncSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2018-12-04 3131208]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2017-07-20 189264]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-07-14 760888]
R2 sedsvc;Windows Remediation Service; C:\Program Files\rempl\sedsvc.exe [2018-12-02 326336]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2018-03-21 3663976]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2018-12-14 1684768]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 SecureLine;Avast SecureLine; D:\Program Files\AVAST Software\SecureLine\VpnSvc.exe []
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_3a4a5;BcastDVRUserService_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2018-12-22 8352184]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_3a4a5;BluetoothUserService_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_3a4a5;DevicePickerUserSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_3a4a5;DevicesFlowUserSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-08-03 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-09-21 784512]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 EvoSvc;Evolve Service; D:\Program Files\Echobit\Evolve\EvoSvc.exe [2018-05-05 1583488]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-02-14 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-07-26 987432]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_3a4a5;MessagingService_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des -service []
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06 787440]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2018-12-04 2270528]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_3a4a5;PimIndexMaintenanceSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_3a4a5;PrintWorkflowUserSvc_3a4a5; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-06-08 976384]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S4 ssh-agent;OpenSSH Authentication Agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [2018-03-10 495616]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#2 Příspěvek od Rudy »

Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu. Zároveň přesouvám vlákno do správné sekce.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#3 Příspěvek od petersff »

Dobrý den, měl jsem zřejmě špatně nastavené zotavení systému, takže vůbec nemám složku minidump https://imgur.com/a/Dv58sl9 je to teď nastavené správně? Měl jsem tam "automatický výpis paměti" zřejmě budu muset čekat do dalšího pádu že? A mimo jiné si všímám že cokoliv udělám například jsem se dočetl že tuto modrou smrt v hodně případech může vyvolávat vadný ovladač na grafice. Tak jsem ho chtěl odinstalovat, ale po restartu PC je zpět , to jiné i u jiných aplikací.. vše se po resetu vrátí tak jak bylo

"UPDATE" - po každém mém restartu se vrátí i výchozí nastavení toho minidumpu takže tam nezůstane uloženo zkrácený výpis paměti.., ale vždy se vrátí automatický výpis z paměti.
Zkusil jsem i safe mode.. zaškrtnu v msconfig safe mode windows chce restart, restart proběhne ale v normálním prostředí.. to stejné aplikace co dám zakázat při startu, po restartu se stejně zapnou

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#4 Příspěvek od Rudy »

To budete muset, potřebuji přesně vědět kód chyby. V přvážné většině je to ale problém paměti RAM. Nemáte v PC něco přetaktováno?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#5 Příspěvek od petersff »

Jak jsem aktualizoval v příspěvku neukládá se mi žádné nastavení po restartu.. ani pro ty minidump nastavení nezůstane uložené . přetaktováno nemám nic PC je ještě v záruce 2 roky. Počítač se po normálním restartu zapne tak jakoby zrovna spadnul.. i když ho sám od sebe restartuju.. Google Chrome mi po každé nabízí obnovení záložek po náhlém vypnutí... vůbec nevím jak to vyřešit..

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#6 Příspěvek od Rudy »

To je problém, bez analýzy minidumpu budu jen střílet naslepo. Udělejte kontrolu RAM: https://forum.viry.cz/viewtopic.php?f=53&t=106788 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#7 Příspěvek od petersff »

Moc dobře vám rozumím.. memtest provedu ráno až půjdu do práce tak to nechám běžet... spíš mě ale z nepokojuje že se neukládá žádné nastavení...

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#8 Příspěvek od Rudy »

Zkuste tedy obnovu systému k datu, kda nastavení ukládal. Spíše to vypadá na systémovou chybu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#9 Příspěvek od petersff »

Dobrý den, tak problém stále přetrvává... nemohu nic udělat vše kde je zapotřebí restart PC se neprovede. chtěl jsem dát počítač do továrního nastavení ale taktéž jakmile dojde k restartu jakoby se nic nestalo... Proto si myslím že to bude nějaká systémová chyba nebo vir. Zkusil jsem stáhnout malwarebytes ale jakmile začal testovat paměťi tak počítač spadnul do BSOD

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#10 Příspěvek od Rudy »

Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#11 Příspěvek od petersff »

tak memtest proběhl bez problémů

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#12 Příspěvek od Rudy »

Tak to máme bez analýzy minidumpu dost velký problém. Stáhněte, nainstalujte a spusťte HWMonitor: https://www.stahuj.cz/utility_a_ostatni ... hwmonitor/ a po ustálení hodnot sem dejte screen jeho okna.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#13 Příspěvek od petersff »

zasílám screen z hw monitoru https://imgur.com/a/9f2yyrc

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118196
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: BSOD memory managment

#14 Příspěvek od Rudy »

Nic to neukázalo. Kolikrát jste nechal proběhnout memtest? Je potřeba alespoň 2-3 kompletních průchodů. Máte NB, nebo stolní PC? Škoda, že nemohu vidět minidump.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

petersff
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 03 črc 2009 18:54

Re: BSOD memory managment

#15 Příspěvek od petersff »

Nechal jsem 2 passy, zítra mohu nechat klidně více.. http://leteckaposta.cz/151365502 zde je log memtestu.. jinak je to stolní PC, ale to omezení že vlastně nic nemůžu udělat už mě začíná limitovat..

Zamčeno