![](https://neslape.cz/images/banner.png)
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o pomoc
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Prosím o pomoc
Dobrý den,
objevila se mi modrá smrt a od té doby je ntb pomalý, při startu se déle načítá a občas nereaguje.
Prosím Vás o pomoc.
Minidump je prázdný.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr at 2019-04-11 21:42:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 47 GB (30%) free of 159 GB
Total RAM: 3993 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:42:04, on 11.4.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files\trend micro\Petr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{E80D88A3-C28C-497E-994C-4E2942C02F36}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\S-Bar\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: MSI Foundation Service - MSI - C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 15789 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\igfxCUIService.exe
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\S-Bar\MSIService.exe"
"C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" f881d935-77b0-4911-ad5a-d0c27e85548b
\??\C:\windows\system32\conhost.exe "-1487442829971414718-11960704001242047052123527583552895643879342887348278789
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\windows\system32\conhost.exe "-67090295940939406719240299841464125572-1339261649519761644615532833932879235
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000bbc
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\windows\SysWOW64\PnkBstrA.exe
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
C:\windows\System32\alg.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe"
igfxEM.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
igfxHK.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\windows\system32\taskmgr.exe" /4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Petr\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Petr\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=73.0.3683.103 --initial-client-data=0xc0,0xc4,0xc8,0xbc,0xcc,0x7fef5696830,0x7fef5696840,0x7fef5696850
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=7880 --on-initialized-event-handle=352 --parent-handle=356 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=2174627548260559119 --mojo-platform-channel-handle=1260 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --lang=cs --service-sandbox-type=network --service-request-channel-token=3869684905056922846 --mojo-platform-channel-handle=1416 /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=6380041038303065596 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6380041038303065596 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2240 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=11190967878920485804 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11190967878920485804 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2244 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=6799991863359601675 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6799991863359601675 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=17062429554176987729 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17062429554176987729 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2440 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=4992348887324272013 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4992348887324272013 --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4320 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=1127892942101692505 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=1127892942101692505 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4288 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=5773181733744365031 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=5773181733744365031 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=17083333958070206556 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17083333958070206556 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2480 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=10896570233483464042 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10896570233483464042 --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=3215585711807905747 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=3215585711807905747 --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=4065144786969619433 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4065144786969619433 --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3864 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=9824370709206356196 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9824370709206356196 --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=16929063433529747807 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=16929063433529747807 --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4300 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=10381052838188766109 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10381052838188766109 --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=2200733187192728279 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2200733187192728279 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Petr\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\lud81arm.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.msn.com/?pc=SK2M&ocid=SK2MDH ... seznam.cz/"
prefs.js - "keyword.URL" - "https://www.google.com/search?q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.144.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.144.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_32_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\lud81arm.default\extensions\
abs@avira.com
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2019-04-06 955912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-06 166360]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-10-25 473664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2019-04-06 674912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-10-25 187968]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BLEServicesCtrl"=C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [2012-02-17 177936]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-11 16781824]
""= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2018-01-05 67896]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BingSvc]
C:\Users\Petr\AppData\Local\Microsoft\BingSvc\BingSvc.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Discord]
C:\Users\Petr\AppData\Local\Discord\app-0.0.304\Discord.exe [2019-01-15 81747288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPLTarget]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_795A6C1EC44E0A41F3030B5EF87A210A]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2019-04-04 1716720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2018-01-22 298296]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Petr\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018-07-23 774544]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Super-Charger]
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2012-01-03 502288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\World of Tanks]
C:\Games\World_of_Tanks\WargamingGameUpdater.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirage]
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-10-13 136488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Tray]
C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [2011-10-13 230696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~1\Office10\OSA.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Petr^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-02-29 56088]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-26 291608]
"THX Audio Control Panel"=C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [2011-08-30 1517056]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2013-01-02 73984]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2019-03-20 98024]
""= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux3"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 1 month======
2019-04-10 21:57:34 ----A---- C:\windows\ntbtlog.txt
2019-04-09 22:26:19 ----A---- C:\windows\system32\mshtml.dll
2019-04-09 22:26:18 ----A---- C:\windows\SYSWOW64\mshtml.dll
2019-04-09 22:26:17 ----A---- C:\windows\system32\ieframe.dll
2019-04-09 22:26:16 ----A---- C:\windows\SYSWOW64\ieframe.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\wininet.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\win32k.sys
2019-04-09 22:26:15 ----A---- C:\windows\system32\shell32.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\msxml6.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\msxml3.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\wininet.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\vbscript.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\urlmon.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\shell32.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\msxml6.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\msxml3.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\iertutil.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\urlmon.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\rdpcore.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\ntoskrnl.exe
2019-04-09 22:26:14 ----A---- C:\windows\system32\lsasrv.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\iertutil.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\oleprn.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntdll.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msxbde40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msrd3x40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mspbde40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msjet40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msi.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msexcl40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mf3216.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\kernel32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\gdi32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ExplorerFrame.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\vbscript.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\termsrv.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\sxssrv.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\oleprn.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\oleaut32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\ntdll.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\msi.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\msfeeds.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\mf3216.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\kernel32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\jscript.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\iedkcs32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\hal.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\gdi32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\netbt.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\luafv.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\ksecdd.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\consent.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\webcheck.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\netbtugc.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msihnd.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msiexec.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\jscript9.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\jscript.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\certcli.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\authui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\webcheck.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\rpcrt4.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ole32.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\netbtugc.exe
2019-04-09 22:26:12 ----A---- C:\windows\system32\msihnd.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\msiexec.exe
2019-04-09 22:26:12 ----A---- C:\windows\system32\mshtmlmedia.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\mshtmled.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\jscript9.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ieui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ieapfltr.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ExplorerFrame.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\dxtrans.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\dxtmsft.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\drivers\srvnet.sys
2019-04-09 22:26:12 ----A---- C:\windows\system32\drivers\srv.sys
2019-04-09 22:26:12 ----A---- C:\windows\system32\certcli.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\authui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\appinfo.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\wdigest.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\sspicli.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\srclient.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\schannel.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\rpchttp.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ole32.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\occache.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msrating.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msimsg.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\kerberos.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\inseng.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieui.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\iesetup.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\iernonce.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\bcrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\appidapi.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\advapi32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64win.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64cpu.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\winsrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wdigest.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\TSpkg.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sspisrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sspicli.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sscore.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srvsvc.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srcore.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srclient.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\smss.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\schannel.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\setbcdlocale.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\secur32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\rstrui.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\rpchttp.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\rpcss.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\occache.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ntvdm64.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ncrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msv1_0.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\msrating.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msimsg.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msimg32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\MshtmlDac.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\lsass.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\KernelBase.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\kerberos.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\jsproxy.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\jscript9diag.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\inseng.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieUnatt.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\iesetup.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\iernonce.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieetwproxystub.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieetwcollector.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\ie4uinit.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\videoprt.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\srv2.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\processr.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\npfs.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\intelppm.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\appid.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\amdppm.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\amdk8.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\csrsrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\cryptbase.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\credssp.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\conhost.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\comcat.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\bcrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidsvc.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidpolicyconverter.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidapi.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\advapi32.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\wow32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\user.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\tzres.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\sscore.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\setup16.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\secur32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\oleres.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msxml6r.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msobjs.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msimg32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msaudite.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\instnm.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\cryptbase.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\credssp.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\comcat.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\auditpol.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\adtschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\tzres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\oleres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msxml6r.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msxml3r.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msobjs.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msaudite.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\ieetwcollectorres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\auditpol.exe
2019-04-09 22:26:10 ----A---- C:\windows\system32\appidcertstorecheck.exe
2019-04-09 22:26:10 ----A---- C:\windows\system32\apisetschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\adtschema.dll
2019-04-06 14:08:56 ----A---- C:\windows\system32\sipnotify.exe
2019-03-12 19:11:06 ----A---- C:\windows\SYSWOW64\poqexec.exe
2019-03-12 19:11:06 ----A---- C:\windows\system32\poqexec.exe
2019-03-12 19:10:57 ----A---- C:\windows\SYSWOW64\blackbox.dll
2019-03-12 19:10:57 ----A---- C:\windows\system32\drmv2clt.dll
2019-03-12 19:10:57 ----A---- C:\windows\system32\blackbox.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\wmdrmsdk.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\quartz.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\msscp.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\drmv2clt.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\AUDIOKSE.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\wmdrmsdk.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\quartz.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\msscp.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\crypt32.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\audiosrv.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\AUDIOKSE.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\qdvd.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\msnetobj.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\evr.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\drmmgrtn.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\crypt32.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\mssign32.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\msnetobj.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\evr.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\drmmgrtn.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\AudioSes.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\AudioEng.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\wintrust.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\mssign32.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\mfplat.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\cryptui.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\AudioEng.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\wintrust.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\qdvd.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\mfplat.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\mf.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\EncDump.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\drivers\mountmgr.sys
2019-03-12 19:10:54 ----A---- C:\windows\system32\cryptui.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\cryptsvc.dll
2019-03-12 19:10:53 ----A---- C:\windows\SYSWOW64\wmp.dll
2019-03-12 19:10:53 ----A---- C:\windows\SYSWOW64\mf.dll
2019-03-12 19:10:53 ----A---- C:\windows\system32\wmp.dll
2019-03-12 19:10:53 ----A---- C:\windows\system32\drivers\PEAuth.sys
2019-03-12 19:10:53 ----A---- C:\windows\system32\audiodg.exe
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\spwmp.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\mfps.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\mfpmp.exe
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\dxmasf.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\wmploc.DLL
2019-03-12 19:10:52 ----A---- C:\windows\system32\spwmp.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcawrk.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcasvc.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcalua.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcadm.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\mfps.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\mfpmp.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\dxmasf.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\cryptsp.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\cryptnet.dll
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\rrinstaller.exe
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\mferror.dll
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\cryptsp.dll
2019-03-12 19:10:51 ----A---- C:\windows\system32\rrinstaller.exe
2019-03-12 19:10:51 ----A---- C:\windows\system32\msmmsp.dll
2019-03-12 19:10:51 ----A---- C:\windows\system32\mferror.dll
2019-03-12 19:10:50 ----A---- C:\windows\system32\pcaevts.dll
2019-03-12 19:09:48 ----A---- C:\windows\system32\appraiser.dll
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\WerFaultSecure.exe
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\WerFault.exe
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\msrd2x40.dll
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\Faultrep.dll
2019-03-12 19:09:47 ----A---- C:\windows\system32\WerFaultSecure.exe
2019-03-12 19:09:47 ----A---- C:\windows\system32\WerFault.exe
2019-03-12 19:09:47 ----A---- C:\windows\system32\Faultrep.dll
2019-03-12 19:09:47 ----A---- C:\windows\system32\drivers\udfs.sys
2019-03-12 19:09:47 ----A---- C:\windows\system32\drivers\cdfs.sys
2019-03-12 19:09:47 ----A---- C:\windows\system32\aeinv.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\wer.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\localspl.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\invagent.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\generaltel.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\drivers\ntfs.sys
2019-03-12 19:09:46 ----A---- C:\windows\system32\devinv.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\centel.dll
2019-03-12 19:09:45 ----A---- C:\windows\SYSWOW64\wer.dll
2019-03-12 19:09:45 ----A---- C:\windows\system32\drivers\msfs.sys
2019-03-12 19:09:45 ----A---- C:\windows\system32\drivers\bridge.sys
2019-03-12 19:09:45 ----A---- C:\windows\system32\aepic.dll
2019-03-12 19:09:45 ----A---- C:\windows\system32\acmigration.dll
2019-03-12 19:09:44 ----A---- C:\windows\system32\drivers\fastfat.sys
2019-03-12 19:09:44 ----A---- C:\windows\system32\drivers\exfat.sys
2019-03-12 19:09:44 ----A---- C:\windows\system32\CompatTelRunner.exe
2019-03-12 19:09:44 ----A---- C:\windows\system32\bridgeunattend.exe
2019-03-12 19:09:44 ----A---- C:\windows\system32\brdgcfg.dll
2019-03-12 19:09:44 ----A---- C:\windows\system32\aitstatic.exe
2019-03-12 19:09:43 ----A---- C:\windows\SYSWOW64\wermgr.exe
2019-03-12 19:09:43 ----A---- C:\windows\SYSWOW64\cdosys.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\wermgr.exe
2019-03-12 19:09:43 ----A---- C:\windows\system32\werdiagcontroller.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\drivers\hidparse.sys
2019-03-12 19:09:43 ----A---- C:\windows\system32\drivers\hidclass.sys
2019-03-12 19:09:43 ----A---- C:\windows\system32\cdosys.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\bridgeres.dll
2019-03-12 19:09:42 ----A---- C:\windows\SYSWOW64\werdiagcontroller.dll
2019-03-12 19:09:42 ----A---- C:\windows\system32\drivers\hidusb.sys
======List of files/folders modified in the last 1 month======
2019-04-11 21:42:04 ----D---- C:\Program Files\trend micro
2019-04-11 21:42:03 ----D---- C:\windows\Temp
2019-04-11 21:29:40 ----SHD---- C:\windows\Installer
2019-04-11 21:29:38 ----SHD---- C:\System Volume Information
2019-04-11 21:29:29 ----D---- C:\Riot Games
2019-04-11 21:27:25 ----D---- C:\windows\system32\config
2019-04-11 21:23:30 ----D---- C:\windows\System32
2019-04-11 21:23:30 ----A---- C:\windows\system32\PerfStringBackup.INI
2019-04-11 21:19:11 ----A---- C:\windows\SYSWOW64\log.txt
2019-04-11 21:10:00 ----D---- C:\Program Files (x86)\Steam
2019-04-11 20:46:21 ----D---- C:\Users\Petr\AppData\Roaming\Spotify
2019-04-11 19:43:51 ----D---- C:\windows\system32\Tasks
2019-04-11 19:41:57 ----D---- C:\windows\winsxs
2019-04-11 19:41:46 ----D---- C:\windows\system32\catroot2
2019-04-11 19:35:43 ----D---- C:\windows\Minidump
2019-04-11 19:35:40 ----D---- C:\Windows
2019-04-10 22:38:53 ----D---- C:\windows\rescache
2019-04-10 22:21:57 ----D---- C:\windows\Microsoft.NET
2019-04-10 22:21:30 ----RSD---- C:\windows\assembly
2019-04-10 21:55:13 ----D---- C:\Users\Petr\AppData\Roaming\TS3Client
2019-04-10 20:10:10 ----D---- C:\Users\Petr\AppData\Roaming\Tropico 4
2019-04-10 19:03:12 ----D---- C:\windows\SYSWOW64\en-US
2019-04-10 19:03:12 ----D---- C:\windows\SYSWOW64\cs-CZ
2019-04-10 19:03:12 ----D---- C:\windows\SysWOW64
2019-04-10 19:03:12 ----D---- C:\Program Files\Internet Explorer
2019-04-10 19:03:12 ----D---- C:\Program Files (x86)\Internet Explorer
2019-04-10 19:03:11 ----D---- C:\windows\system32\en-US
2019-04-10 19:03:11 ----D---- C:\windows\system32\drivers\en-US
2019-04-10 19:03:11 ----D---- C:\windows\system32\drivers
2019-04-10 19:03:11 ----D---- C:\windows\system32\cs-CZ
2019-04-10 19:03:11 ----D---- C:\windows\inf
2019-04-10 19:03:11 ----D---- C:\windows\AppPatch
2019-04-10 19:03:10 ----D---- C:\windows\system32\Boot
2019-04-10 19:03:09 ----D---- C:\windows\system32\DriverStore
2019-04-10 18:44:19 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2019-04-10 18:44:12 ----D---- C:\windows\system32\Macromed
2019-04-10 18:44:10 ----D---- C:\windows\SYSWOW64\Macromed
2019-04-10 18:42:01 ----D---- C:\windows\system32\MRT
2019-04-10 18:37:10 ----AC---- C:\windows\system32\MRT.exe
2019-04-07 22:13:41 ----D---- C:\Users\Petr\AppData\Roaming\BitTorrent
2019-04-07 16:28:47 ----D---- C:\windows\Logs
2019-04-06 14:17:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-04-06 14:16:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2019-04-06 14:15:34 ----D---- C:\Program Files\Microsoft Office
2019-03-30 23:11:46 ----RD---- C:\Program Files (x86)
2019-03-30 23:03:02 ----D---- C:\ProgramData\Package Cache
2019-03-18 21:36:46 ----D---- C:\Users\Petr\AppData\Roaming\discord
2019-03-13 17:11:30 ----D---- C:\windows\SYSWOW64\Dism
2019-03-13 17:11:30 ----D---- C:\windows\system32\Dism
2019-03-13 17:11:30 ----D---- C:\Program Files\Windows Media Player
2019-03-13 17:11:30 ----D---- C:\Program Files (x86)\Windows Media Player
2019-03-13 17:11:27 ----SD---- C:\windows\system32\CompatTel
2019-03-13 17:11:27 ----D---- C:\windows\system32\appraiser
2019-03-13 17:11:25 ----D---- C:\windows\system32\migration
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 avdevprot;avdevprot; C:\windows\system32\DRIVERS\avdevprot.sys [2019-02-26 65104]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\drivers\iusb3hcs.sys [2012-02-26 16152]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2015-11-06 40264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2019-04-10 175104]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2019-02-26 36072]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-12 26528]
R1 LeapdroidVMDrv;LeapdroidVMDrv; \??\C:\Program Files\Leapdroid\VM\LeapdroidVMDrv.sys [2018-02-04 300952]
R1 LUMDriver;LUMDriver; \??\C:\windows\system32\drivers\LUMDriver.sys [2008-01-02 24848]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\windows\system32\DRIVERS\vsdatant.sys [2012-12-13 450136]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2019-04-10 207576]
R2 avnetflt;avnetflt; C:\windows\system32\DRIVERS\avnetflt.sys [2017-03-26 78600]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-10-13 31216]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\windows\system32\DRIVERS\dtlitescsibus.sys [2015-11-15 30264]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\drivers\ETD.sys [2012-02-29 143144]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2017-07-11 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\drivers\iusb3hub.sys [2012-02-26 356120]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\drivers\iusb3xhc.sys [2012-02-26 788760]
R3 MBfilt;MBfilt; C:\windows\system32\drivers\MBfilt64.sys [2017-10-25 41088]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\TeeDriverx64.sys [2016-07-22 181304]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\windows\system32\DRIVERS\NETwsw01.sys [2015-08-22 11534096]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2010-01-18 14136]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2018-02-27 50624]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\windows\system32\DRIVERS\RtsPStor.sys [2017-10-25 400352]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2018-02-27 980424]
R3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-05-15 80384]
S3 btmaudio;Intel Bluetooth Audio Service; C:\windows\system32\drivers\btmaud.sys [2011-11-30 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-11-30 94720]
S3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2015-12-08 1448248]
S3 ggflt;SOMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-11-18 16088]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2013-06-30 27760]
S3 ggsomc;SOMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsomc.sys [2014-11-18 30424]
S3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 ibtfltcoex;ibtfltcoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2015-02-12 69088]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 qcfilter;Qualcomm USB Composite Device Filter Driver; C:\windows\system32\DRIVERS\qcusbfilter.sys [2018-02-27 49208]
S3 qcusbnet;Qualcomm USB-NDIS miniport; C:\windows\system32\DRIVERS\qcusbnet.sys [2018-02-27 428600]
S3 qcusbser;Qualcomm USB Device for Legacy Serial Communication; C:\windows\system32\DRIVERS\qcusbser.sys [2017-03-15 254520]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 USBAAPL64;Apple Mobile USB Driver; C:\windows\System32\Drivers\usbaapl64.sys [2017-11-27 54784]
S3 USBPNPA;USB PnP Sound Device Interface; C:\windows\system32\drivers\CM10864.sys [2011-04-29 1308160]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2019-04-10 244656]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2019-04-10 244656]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-01-05 83768]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2019-03-20 466280]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-02-21 1014096]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-02-21 1104208]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2019-03-28 11082312]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-02 13592]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-12-07 2429544]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\windows\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-15 127320]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-15 276824]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [2012-03-16 160768]
R2 MSI Foundation Service;MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [2010-07-17 12800]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2012-01-03 138768]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2015-10-15 1255544]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2015-03-27 76152]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-15 362840]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2013-01-02 2448032]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [2019-04-10 904952]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [2019-04-10 1179240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2018-03-26 128584]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-29 1260472]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-09-15 2977640]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-04-10 335416]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-03-26 52832]
S3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-02-21 1304912]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe [2019-04-04 1268720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2019-03-26 116224]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2018-01-22 673080]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-14 119408]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-09-15 2098528]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2019-03-28 266736]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-12-27 5132888]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2019-03-06 1693984]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-11-08 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
-----------------EOF-----------------
objevila se mi modrá smrt a od té doby je ntb pomalý, při startu se déle načítá a občas nereaguje.
Prosím Vás o pomoc.
Minidump je prázdný.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr at 2019-04-11 21:42:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 47 GB (30%) free of 159 GB
Total RAM: 3993 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:42:04, on 11.4.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files\trend micro\Petr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{E80D88A3-C28C-497E-994C-4E2942C02F36}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{3A69E1EF-6628-4BEF-909A-08185EFA1F92}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\S-Bar\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: MSI Foundation Service - MSI - C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 15789 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\igfxCUIService.exe
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\S-Bar\MSIService.exe"
"C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" f881d935-77b0-4911-ad5a-d0c27e85548b
\??\C:\windows\system32\conhost.exe "-1487442829971414718-11960704001242047052123527583552895643879342887348278789
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\windows\system32\conhost.exe "-67090295940939406719240299841464125572-1339261649519761644615532833932879235
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000bbc
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\windows\SysWOW64\PnkBstrA.exe
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
C:\windows\System32\alg.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe"
igfxEM.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
igfxHK.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\windows\system32\taskmgr.exe" /4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Petr\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Petr\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=73.0.3683.103 --initial-client-data=0xc0,0xc4,0xc8,0xbc,0xcc,0x7fef5696830,0x7fef5696840,0x7fef5696850
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=7880 --on-initialized-event-handle=352 --parent-handle=356 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=2174627548260559119 --mojo-platform-channel-handle=1260 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --lang=cs --service-sandbox-type=network --service-request-channel-token=3869684905056922846 --mojo-platform-channel-handle=1416 /prefetch:8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=6380041038303065596 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6380041038303065596 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2240 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=11190967878920485804 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11190967878920485804 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2244 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=6799991863359601675 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6799991863359601675 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=17062429554176987729 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17062429554176987729 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2440 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=4992348887324272013 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4992348887324272013 --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4320 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=1127892942101692505 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=1127892942101692505 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4288 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=5773181733744365031 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=5773181733744365031 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=17083333958070206556 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17083333958070206556 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2480 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=10896570233483464042 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10896570233483464042 --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=3215585711807905747 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=3215585711807905747 --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=4065144786969619433 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4065144786969619433 --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3864 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=9824370709206356196 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9824370709206356196 --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=16929063433529747807 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=16929063433529747807 --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4300 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=10381052838188766109 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10381052838188766109 --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1136,6475164073062821429,376655551190911441,131072 --service-pipe-token=2200733187192728279 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2200733187192728279 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Petr\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\lud81arm.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.msn.com/?pc=SK2M&ocid=SK2MDH ... seznam.cz/"
prefs.js - "keyword.URL" - "https://www.google.com/search?q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.144.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.144.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_32_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\lud81arm.default\extensions\
abs@avira.com
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2019-04-06 955912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-06 166360]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-10-25 473664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2019-04-06 674912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-10-25 187968]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BLEServicesCtrl"=C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [2012-02-17 177936]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-11 16781824]
""= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2018-01-05 67896]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BingSvc]
C:\Users\Petr\AppData\Local\Microsoft\BingSvc\BingSvc.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Discord]
C:\Users\Petr\AppData\Local\Discord\app-0.0.304\Discord.exe [2019-01-15 81747288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPLTarget]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_795A6C1EC44E0A41F3030B5EF87A210A]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2019-04-04 1716720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2018-01-22 298296]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Petr\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018-07-23 774544]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Super-Charger]
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2012-01-03 502288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\World of Tanks]
C:\Games\World_of_Tanks\WargamingGameUpdater.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirage]
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-10-13 136488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Tray]
C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [2011-10-13 230696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~1\Office10\OSA.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Petr^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-02-29 56088]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-26 291608]
"THX Audio Control Panel"=C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [2011-08-30 1517056]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2013-01-02 73984]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2019-03-20 98024]
""= []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux3"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 1 month======
2019-04-10 21:57:34 ----A---- C:\windows\ntbtlog.txt
2019-04-09 22:26:19 ----A---- C:\windows\system32\mshtml.dll
2019-04-09 22:26:18 ----A---- C:\windows\SYSWOW64\mshtml.dll
2019-04-09 22:26:17 ----A---- C:\windows\system32\ieframe.dll
2019-04-09 22:26:16 ----A---- C:\windows\SYSWOW64\ieframe.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\wininet.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\win32k.sys
2019-04-09 22:26:15 ----A---- C:\windows\system32\shell32.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\msxml6.dll
2019-04-09 22:26:15 ----A---- C:\windows\system32\msxml3.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\wininet.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\vbscript.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\urlmon.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\shell32.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\msxml6.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\msxml3.dll
2019-04-09 22:26:14 ----A---- C:\windows\SYSWOW64\iertutil.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\urlmon.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\rdpcore.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\ntoskrnl.exe
2019-04-09 22:26:14 ----A---- C:\windows\system32\lsasrv.dll
2019-04-09 22:26:14 ----A---- C:\windows\system32\iertutil.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\oleprn.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ntdll.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msxbde40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msrd3x40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mspbde40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msjet40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msi.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\msexcl40.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\mf3216.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\kernel32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\gdi32.dll
2019-04-09 22:26:13 ----A---- C:\windows\SYSWOW64\ExplorerFrame.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\vbscript.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\termsrv.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\sxssrv.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\oleprn.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\oleaut32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\ntdll.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\msi.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\msfeeds.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\mf3216.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\kernel32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\jscript.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\iedkcs32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\hal.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\gdi32.dll
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\netbt.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\luafv.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\drivers\ksecdd.sys
2019-04-09 22:26:13 ----A---- C:\windows\system32\consent.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\webcheck.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\netbtugc.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msihnd.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msiexec.exe
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\jscript9.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\jscript.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\certcli.dll
2019-04-09 22:26:12 ----A---- C:\windows\SYSWOW64\authui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\webcheck.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\rpcrt4.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ole32.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\netbtugc.exe
2019-04-09 22:26:12 ----A---- C:\windows\system32\msihnd.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\msiexec.exe
2019-04-09 22:26:12 ----A---- C:\windows\system32\mshtmlmedia.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\mshtmled.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\jscript9.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ieui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ieapfltr.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\ExplorerFrame.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\dxtrans.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\dxtmsft.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\drivers\srvnet.sys
2019-04-09 22:26:12 ----A---- C:\windows\system32\drivers\srv.sys
2019-04-09 22:26:12 ----A---- C:\windows\system32\certcli.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\authui.dll
2019-04-09 22:26:12 ----A---- C:\windows\system32\appinfo.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\wdigest.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\sspicli.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\srclient.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\schannel.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\rpchttp.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ole32.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\occache.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msrating.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\msimsg.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\kerberos.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\inseng.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieui.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\iesetup.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\iernonce.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\bcrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\appidapi.dll
2019-04-09 22:26:11 ----A---- C:\windows\SYSWOW64\advapi32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64win.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64cpu.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wow64.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\winsrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\wdigest.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\TSpkg.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sspisrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sspicli.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\sscore.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srvsvc.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srcore.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\srclient.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\smss.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\schannel.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\setbcdlocale.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\secur32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\rstrui.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\rpchttp.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\rpcss.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\occache.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ntvdm64.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ncrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msv1_0.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\msrating.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msimsg.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\msimg32.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\MshtmlDac.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\lsass.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\KernelBase.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\kerberos.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\jsproxy.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\jscript9diag.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\inseng.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieUnatt.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\iesetup.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\iernonce.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieetwproxystub.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\ieetwcollector.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\ie4uinit.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\videoprt.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\srv2.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\processr.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\npfs.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\intelppm.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\appid.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\amdppm.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\drivers\amdk8.sys
2019-04-09 22:26:11 ----A---- C:\windows\system32\csrsrv.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\cryptbase.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\credssp.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\conhost.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\comcat.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\bcrypt.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidsvc.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidpolicyconverter.exe
2019-04-09 22:26:11 ----A---- C:\windows\system32\appidapi.dll
2019-04-09 22:26:11 ----A---- C:\windows\system32\advapi32.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 22:26:10 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\wow32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\user.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\tzres.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\sscore.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\setup16.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\secur32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\oleres.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msxml6r.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msobjs.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msimg32.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\msaudite.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\instnm.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\cryptbase.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\credssp.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\comcat.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\auditpol.exe
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\SYSWOW64\adtschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\tzres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\oleres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msxml6r.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msxml3r.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msobjs.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\msaudite.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\ieetwcollectorres.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\auditpol.exe
2019-04-09 22:26:10 ----A---- C:\windows\system32\appidcertstorecheck.exe
2019-04-09 22:26:10 ----A---- C:\windows\system32\apisetschema.dll
2019-04-09 22:26:10 ----A---- C:\windows\system32\adtschema.dll
2019-04-06 14:08:56 ----A---- C:\windows\system32\sipnotify.exe
2019-03-12 19:11:06 ----A---- C:\windows\SYSWOW64\poqexec.exe
2019-03-12 19:11:06 ----A---- C:\windows\system32\poqexec.exe
2019-03-12 19:10:57 ----A---- C:\windows\SYSWOW64\blackbox.dll
2019-03-12 19:10:57 ----A---- C:\windows\system32\drmv2clt.dll
2019-03-12 19:10:57 ----A---- C:\windows\system32\blackbox.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\wmdrmsdk.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\quartz.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\msscp.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\drmv2clt.dll
2019-03-12 19:10:56 ----A---- C:\windows\SYSWOW64\AUDIOKSE.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\wmdrmsdk.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\quartz.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\msscp.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\crypt32.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\audiosrv.dll
2019-03-12 19:10:56 ----A---- C:\windows\system32\AUDIOKSE.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\qdvd.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\msnetobj.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\evr.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\drmmgrtn.dll
2019-03-12 19:10:55 ----A---- C:\windows\SYSWOW64\crypt32.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\mssign32.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\msnetobj.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\evr.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\drmmgrtn.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\AudioSes.dll
2019-03-12 19:10:55 ----A---- C:\windows\system32\AudioEng.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\wintrust.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\mssign32.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\mfplat.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\cryptui.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2019-03-12 19:10:54 ----A---- C:\windows\SYSWOW64\AudioEng.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\wintrust.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\qdvd.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\mfplat.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\mf.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\EncDump.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\drivers\mountmgr.sys
2019-03-12 19:10:54 ----A---- C:\windows\system32\cryptui.dll
2019-03-12 19:10:54 ----A---- C:\windows\system32\cryptsvc.dll
2019-03-12 19:10:53 ----A---- C:\windows\SYSWOW64\wmp.dll
2019-03-12 19:10:53 ----A---- C:\windows\SYSWOW64\mf.dll
2019-03-12 19:10:53 ----A---- C:\windows\system32\wmp.dll
2019-03-12 19:10:53 ----A---- C:\windows\system32\drivers\PEAuth.sys
2019-03-12 19:10:53 ----A---- C:\windows\system32\audiodg.exe
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\spwmp.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\mfps.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\mfpmp.exe
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\dxmasf.dll
2019-03-12 19:10:52 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\wmploc.DLL
2019-03-12 19:10:52 ----A---- C:\windows\system32\spwmp.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcawrk.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcasvc.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcalua.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\pcadm.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\mfps.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\mfpmp.exe
2019-03-12 19:10:52 ----A---- C:\windows\system32\dxmasf.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\cryptsp.dll
2019-03-12 19:10:52 ----A---- C:\windows\system32\cryptnet.dll
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\rrinstaller.exe
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\mferror.dll
2019-03-12 19:10:51 ----A---- C:\windows\SYSWOW64\cryptsp.dll
2019-03-12 19:10:51 ----A---- C:\windows\system32\rrinstaller.exe
2019-03-12 19:10:51 ----A---- C:\windows\system32\msmmsp.dll
2019-03-12 19:10:51 ----A---- C:\windows\system32\mferror.dll
2019-03-12 19:10:50 ----A---- C:\windows\system32\pcaevts.dll
2019-03-12 19:09:48 ----A---- C:\windows\system32\appraiser.dll
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\WerFaultSecure.exe
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\WerFault.exe
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\msrd2x40.dll
2019-03-12 19:09:47 ----A---- C:\windows\SYSWOW64\Faultrep.dll
2019-03-12 19:09:47 ----A---- C:\windows\system32\WerFaultSecure.exe
2019-03-12 19:09:47 ----A---- C:\windows\system32\WerFault.exe
2019-03-12 19:09:47 ----A---- C:\windows\system32\Faultrep.dll
2019-03-12 19:09:47 ----A---- C:\windows\system32\drivers\udfs.sys
2019-03-12 19:09:47 ----A---- C:\windows\system32\drivers\cdfs.sys
2019-03-12 19:09:47 ----A---- C:\windows\system32\aeinv.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\wer.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\localspl.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\invagent.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\generaltel.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\drivers\ntfs.sys
2019-03-12 19:09:46 ----A---- C:\windows\system32\devinv.dll
2019-03-12 19:09:46 ----A---- C:\windows\system32\centel.dll
2019-03-12 19:09:45 ----A---- C:\windows\SYSWOW64\wer.dll
2019-03-12 19:09:45 ----A---- C:\windows\system32\drivers\msfs.sys
2019-03-12 19:09:45 ----A---- C:\windows\system32\drivers\bridge.sys
2019-03-12 19:09:45 ----A---- C:\windows\system32\aepic.dll
2019-03-12 19:09:45 ----A---- C:\windows\system32\acmigration.dll
2019-03-12 19:09:44 ----A---- C:\windows\system32\drivers\fastfat.sys
2019-03-12 19:09:44 ----A---- C:\windows\system32\drivers\exfat.sys
2019-03-12 19:09:44 ----A---- C:\windows\system32\CompatTelRunner.exe
2019-03-12 19:09:44 ----A---- C:\windows\system32\bridgeunattend.exe
2019-03-12 19:09:44 ----A---- C:\windows\system32\brdgcfg.dll
2019-03-12 19:09:44 ----A---- C:\windows\system32\aitstatic.exe
2019-03-12 19:09:43 ----A---- C:\windows\SYSWOW64\wermgr.exe
2019-03-12 19:09:43 ----A---- C:\windows\SYSWOW64\cdosys.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\wermgr.exe
2019-03-12 19:09:43 ----A---- C:\windows\system32\werdiagcontroller.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\drivers\hidparse.sys
2019-03-12 19:09:43 ----A---- C:\windows\system32\drivers\hidclass.sys
2019-03-12 19:09:43 ----A---- C:\windows\system32\cdosys.dll
2019-03-12 19:09:43 ----A---- C:\windows\system32\bridgeres.dll
2019-03-12 19:09:42 ----A---- C:\windows\SYSWOW64\werdiagcontroller.dll
2019-03-12 19:09:42 ----A---- C:\windows\system32\drivers\hidusb.sys
======List of files/folders modified in the last 1 month======
2019-04-11 21:42:04 ----D---- C:\Program Files\trend micro
2019-04-11 21:42:03 ----D---- C:\windows\Temp
2019-04-11 21:29:40 ----SHD---- C:\windows\Installer
2019-04-11 21:29:38 ----SHD---- C:\System Volume Information
2019-04-11 21:29:29 ----D---- C:\Riot Games
2019-04-11 21:27:25 ----D---- C:\windows\system32\config
2019-04-11 21:23:30 ----D---- C:\windows\System32
2019-04-11 21:23:30 ----A---- C:\windows\system32\PerfStringBackup.INI
2019-04-11 21:19:11 ----A---- C:\windows\SYSWOW64\log.txt
2019-04-11 21:10:00 ----D---- C:\Program Files (x86)\Steam
2019-04-11 20:46:21 ----D---- C:\Users\Petr\AppData\Roaming\Spotify
2019-04-11 19:43:51 ----D---- C:\windows\system32\Tasks
2019-04-11 19:41:57 ----D---- C:\windows\winsxs
2019-04-11 19:41:46 ----D---- C:\windows\system32\catroot2
2019-04-11 19:35:43 ----D---- C:\windows\Minidump
2019-04-11 19:35:40 ----D---- C:\Windows
2019-04-10 22:38:53 ----D---- C:\windows\rescache
2019-04-10 22:21:57 ----D---- C:\windows\Microsoft.NET
2019-04-10 22:21:30 ----RSD---- C:\windows\assembly
2019-04-10 21:55:13 ----D---- C:\Users\Petr\AppData\Roaming\TS3Client
2019-04-10 20:10:10 ----D---- C:\Users\Petr\AppData\Roaming\Tropico 4
2019-04-10 19:03:12 ----D---- C:\windows\SYSWOW64\en-US
2019-04-10 19:03:12 ----D---- C:\windows\SYSWOW64\cs-CZ
2019-04-10 19:03:12 ----D---- C:\windows\SysWOW64
2019-04-10 19:03:12 ----D---- C:\Program Files\Internet Explorer
2019-04-10 19:03:12 ----D---- C:\Program Files (x86)\Internet Explorer
2019-04-10 19:03:11 ----D---- C:\windows\system32\en-US
2019-04-10 19:03:11 ----D---- C:\windows\system32\drivers\en-US
2019-04-10 19:03:11 ----D---- C:\windows\system32\drivers
2019-04-10 19:03:11 ----D---- C:\windows\system32\cs-CZ
2019-04-10 19:03:11 ----D---- C:\windows\inf
2019-04-10 19:03:11 ----D---- C:\windows\AppPatch
2019-04-10 19:03:10 ----D---- C:\windows\system32\Boot
2019-04-10 19:03:09 ----D---- C:\windows\system32\DriverStore
2019-04-10 18:44:19 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2019-04-10 18:44:12 ----D---- C:\windows\system32\Macromed
2019-04-10 18:44:10 ----D---- C:\windows\SYSWOW64\Macromed
2019-04-10 18:42:01 ----D---- C:\windows\system32\MRT
2019-04-10 18:37:10 ----AC---- C:\windows\system32\MRT.exe
2019-04-07 22:13:41 ----D---- C:\Users\Petr\AppData\Roaming\BitTorrent
2019-04-07 16:28:47 ----D---- C:\windows\Logs
2019-04-06 14:17:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-04-06 14:16:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2019-04-06 14:15:34 ----D---- C:\Program Files\Microsoft Office
2019-03-30 23:11:46 ----RD---- C:\Program Files (x86)
2019-03-30 23:03:02 ----D---- C:\ProgramData\Package Cache
2019-03-18 21:36:46 ----D---- C:\Users\Petr\AppData\Roaming\discord
2019-03-13 17:11:30 ----D---- C:\windows\SYSWOW64\Dism
2019-03-13 17:11:30 ----D---- C:\windows\system32\Dism
2019-03-13 17:11:30 ----D---- C:\Program Files\Windows Media Player
2019-03-13 17:11:30 ----D---- C:\Program Files (x86)\Windows Media Player
2019-03-13 17:11:27 ----SD---- C:\windows\system32\CompatTel
2019-03-13 17:11:27 ----D---- C:\windows\system32\appraiser
2019-03-13 17:11:25 ----D---- C:\windows\system32\migration
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 avdevprot;avdevprot; C:\windows\system32\DRIVERS\avdevprot.sys [2019-02-26 65104]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\drivers\iusb3hcs.sys [2012-02-26 16152]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2015-11-06 40264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2019-04-10 175104]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2019-02-26 36072]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-12 26528]
R1 LeapdroidVMDrv;LeapdroidVMDrv; \??\C:\Program Files\Leapdroid\VM\LeapdroidVMDrv.sys [2018-02-04 300952]
R1 LUMDriver;LUMDriver; \??\C:\windows\system32\drivers\LUMDriver.sys [2008-01-02 24848]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\windows\system32\DRIVERS\vsdatant.sys [2012-12-13 450136]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2019-04-10 207576]
R2 avnetflt;avnetflt; C:\windows\system32\DRIVERS\avnetflt.sys [2017-03-26 78600]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-10-13 31216]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\windows\system32\DRIVERS\dtlitescsibus.sys [2015-11-15 30264]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\drivers\ETD.sys [2012-02-29 143144]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2017-07-11 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\drivers\iusb3hub.sys [2012-02-26 356120]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\drivers\iusb3xhc.sys [2012-02-26 788760]
R3 MBfilt;MBfilt; C:\windows\system32\drivers\MBfilt64.sys [2017-10-25 41088]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\TeeDriverx64.sys [2016-07-22 181304]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\windows\system32\DRIVERS\NETwsw01.sys [2015-08-22 11534096]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2010-01-18 14136]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2018-02-27 50624]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\windows\system32\DRIVERS\RtsPStor.sys [2017-10-25 400352]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2018-02-27 980424]
R3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-05-15 80384]
S3 btmaudio;Intel Bluetooth Audio Service; C:\windows\system32\drivers\btmaud.sys [2011-11-30 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-11-30 94720]
S3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2015-12-08 1448248]
S3 ggflt;SOMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-11-18 16088]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2013-06-30 27760]
S3 ggsomc;SOMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsomc.sys [2014-11-18 30424]
S3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 ibtfltcoex;ibtfltcoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2015-02-12 69088]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 qcfilter;Qualcomm USB Composite Device Filter Driver; C:\windows\system32\DRIVERS\qcusbfilter.sys [2018-02-27 49208]
S3 qcusbnet;Qualcomm USB-NDIS miniport; C:\windows\system32\DRIVERS\qcusbnet.sys [2018-02-27 428600]
S3 qcusbser;Qualcomm USB Device for Legacy Serial Communication; C:\windows\system32\DRIVERS\qcusbser.sys [2017-03-15 254520]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 USBAAPL64;Apple Mobile USB Driver; C:\windows\System32\Drivers\usbaapl64.sys [2017-11-27 54784]
S3 USBPNPA;USB PnP Sound Device Interface; C:\windows\system32\drivers\CM10864.sys [2011-04-29 1308160]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2019-04-10 244656]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2019-04-10 244656]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-01-05 83768]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2019-03-20 466280]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-02-21 1014096]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-02-21 1104208]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2019-03-28 11082312]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-02-02 13592]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-12-07 2429544]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\windows\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-15 127320]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-15 276824]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [2012-03-16 160768]
R2 MSI Foundation Service;MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [2010-07-17 12800]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2012-01-03 138768]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2015-10-15 1255544]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2015-03-27 76152]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-15 362840]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2013-01-02 2448032]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [2019-04-10 904952]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [2019-04-10 1179240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2018-03-26 128584]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-29 1260472]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-09-15 2977640]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-04-10 335416]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-03-26 52832]
S3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-02-21 1304912]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe [2019-04-04 1268720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2019-03-26 116224]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2018-01-22 673080]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-14 119408]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-09-15 2098528]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2019-03-28 266736]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-12-27 5132888]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2019-03-06 1693984]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-11-08 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
-----------------EOF-----------------
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu.
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o pomoc
Ale pravdou je, že jsem projížděl ntb přes cleanmgr we windows, tak nevím zda tam něco bylo a ono se to smazalo
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
OK, přehlédl jsem. Bez analýzy minidumpu budeme jen střílet naslepo. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: https://www.stahuj.cz/utility_a_ostatni ... ldiskinfo/ a přes Úpravy>Kopírovat sem dejte log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o pomoc
Instalačku CrystalDiskInfo mi hodila Avira do Karantény, doufám tedy, že je to bezpečný program.
----------------------------------------------------------------------------
CrystalDiskInfo 8.0.0 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2019/04/12 15:00:58
-- Controller Map ----------------------------------------------------------
+ Intel(R) 7 Series Chipset Family SATA AHCI Controller [ATA]
- Samsung SSD 840 EVO 250G
- PIONEER DVD-RW DVRTD11RS
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]
-- Disk List ---------------------------------------------------------------
(1) Samsung SSD 840 EVO 250GB : 250,0 GB [0/0/0, pd1] - sg
----------------------------------------------------------------------------
(1) Samsung SSD 840 EVO 250GB
----------------------------------------------------------------------------
Model : Samsung SSD 840 EVO 250GB
Firmware : EXT0BB6Q
Serial Number : S1DBNSBF364674X
Disk Size : 250,0 GB (8,4/137,4/250,0/----)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 488397168
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4c
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 9929 hod.
Power On Count : 2295 krát
Host Writes : 20351 GB
Wear Level Count : 212
Temperature : 30 C (86 F)
Health Status : Dobrý (100 %)
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM
APM Level : ----
AAM Level : ----
Drive Letter : C: D:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
05 100 100 _10 000000000000 Reallocated Sector Count
09 _98 _98 __0 0000000026C9 Power-on Hours
0C _97 _97 __0 0000000008F7 Power-on Count
B1 _82 _82 __0 0000000000D4 Wear Leveling Count
B3 100 100 _10 000000000000 Used Reserved Block Count (Total)
B5 100 100 _10 000000000000 Program Fail Count (Total)
B6 100 100 _10 000000000000 Erase Fail Count (Total)
B7 100 100 _10 000000000000 Runtime Bad Block (Total)
BB 100 100 __0 000000000000 Uncorrectable Error Count
BE _70 _47 __0 00000000001E Airflow Temperature
C3 200 200 __0 000000000000 ECC Error Rate
C7 _99 _99 __0 000000000001 CRC Error Count
EB _99 _99 __0 000000000014 POR Recovery Count
F1 _99 _99 __0 0009EFFBA409 Total LBA Written
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 5331 4442 4E53 4246 3336 3436 3734 5820 2020 2020
020: 0000 0000 0000 4558 5430 4242 3651 5361 6D73 756E
030: 6720 5353 4420 3834 3020 4556 4F20 3235 3047 4220
040: 2020 2020 2020 2020 2020 2020 2020 8001 4001 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0101
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0F10
070: 0000 0000 0000 0000 0000 001F 850E 0046 006C 006C
080: 03FC 0039 746B 7D01 4163 7469 BC01 4163 407F 0001
090: 0004 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 5970 1D1C 0000 0000 0000 0008 4000 0000 5002 5388
110: A030 79B2 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 107F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0800 0000 0000 0000 0000
240: 0000 0000 0000 4000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 92A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 33 00 64 64 00 00 00 00 00 00 00 09 32
010: 00 62 62 C9 26 00 00 00 00 00 0C 32 00 61 61 F7
020: 08 00 00 00 00 00 B1 13 00 52 52 D4 00 00 00 00
030: 00 00 B3 13 00 64 64 00 00 00 00 00 00 00 B5 32
040: 00 64 64 00 00 00 00 00 00 00 B6 32 00 64 64 00
050: 00 00 00 00 00 00 B7 13 00 64 64 00 00 00 00 00
060: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BE 32
070: 00 46 2F 1E 00 00 00 00 00 00 C3 1A 00 C8 C8 00
080: 00 00 00 00 00 00 C7 3E 00 63 63 01 00 00 00 00
090: 00 00 EB 12 00 63 63 14 00 00 00 00 00 00 F1 32
0A0: 00 63 63 09 A4 FB EF 09 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 C0 12 00 53
170: 03 00 01 00 02 50 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0B
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 0A 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 B1 00 00 00 00 00 00 00 00 00
030: 00 00 B3 0A 00 00 00 00 00 00 00 00 00 00 B5 0A
040: 00 00 00 00 00 00 00 00 00 00 B6 0A 00 00 00 00
050: 00 00 00 00 00 00 B7 0A 00 00 00 00 00 00 00 00
060: 00 00 BB 00 00 00 00 00 00 00 00 00 00 00 BE 00
070: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
080: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
090: 00 00 EB 00 00 00 00 00 00 00 00 00 00 00 F1 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4E
----------------------------------------------------------------------------
CrystalDiskInfo 8.0.0 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2019/04/12 15:00:58
-- Controller Map ----------------------------------------------------------
+ Intel(R) 7 Series Chipset Family SATA AHCI Controller [ATA]
- Samsung SSD 840 EVO 250G
- PIONEER DVD-RW DVRTD11RS
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]
-- Disk List ---------------------------------------------------------------
(1) Samsung SSD 840 EVO 250GB : 250,0 GB [0/0/0, pd1] - sg
----------------------------------------------------------------------------
(1) Samsung SSD 840 EVO 250GB
----------------------------------------------------------------------------
Model : Samsung SSD 840 EVO 250GB
Firmware : EXT0BB6Q
Serial Number : S1DBNSBF364674X
Disk Size : 250,0 GB (8,4/137,4/250,0/----)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 488397168
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4c
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 9929 hod.
Power On Count : 2295 krát
Host Writes : 20351 GB
Wear Level Count : 212
Temperature : 30 C (86 F)
Health Status : Dobrý (100 %)
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM
APM Level : ----
AAM Level : ----
Drive Letter : C: D:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
05 100 100 _10 000000000000 Reallocated Sector Count
09 _98 _98 __0 0000000026C9 Power-on Hours
0C _97 _97 __0 0000000008F7 Power-on Count
B1 _82 _82 __0 0000000000D4 Wear Leveling Count
B3 100 100 _10 000000000000 Used Reserved Block Count (Total)
B5 100 100 _10 000000000000 Program Fail Count (Total)
B6 100 100 _10 000000000000 Erase Fail Count (Total)
B7 100 100 _10 000000000000 Runtime Bad Block (Total)
BB 100 100 __0 000000000000 Uncorrectable Error Count
BE _70 _47 __0 00000000001E Airflow Temperature
C3 200 200 __0 000000000000 ECC Error Rate
C7 _99 _99 __0 000000000001 CRC Error Count
EB _99 _99 __0 000000000014 POR Recovery Count
F1 _99 _99 __0 0009EFFBA409 Total LBA Written
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 5331 4442 4E53 4246 3336 3436 3734 5820 2020 2020
020: 0000 0000 0000 4558 5430 4242 3651 5361 6D73 756E
030: 6720 5353 4420 3834 3020 4556 4F20 3235 3047 4220
040: 2020 2020 2020 2020 2020 2020 2020 8001 4001 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0101
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0F10
070: 0000 0000 0000 0000 0000 001F 850E 0046 006C 006C
080: 03FC 0039 746B 7D01 4163 7469 BC01 4163 407F 0001
090: 0004 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 5970 1D1C 0000 0000 0000 0008 4000 0000 5002 5388
110: A030 79B2 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 107F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0800 0000 0000 0000 0000
240: 0000 0000 0000 4000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 92A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 33 00 64 64 00 00 00 00 00 00 00 09 32
010: 00 62 62 C9 26 00 00 00 00 00 0C 32 00 61 61 F7
020: 08 00 00 00 00 00 B1 13 00 52 52 D4 00 00 00 00
030: 00 00 B3 13 00 64 64 00 00 00 00 00 00 00 B5 32
040: 00 64 64 00 00 00 00 00 00 00 B6 32 00 64 64 00
050: 00 00 00 00 00 00 B7 13 00 64 64 00 00 00 00 00
060: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BE 32
070: 00 46 2F 1E 00 00 00 00 00 00 C3 1A 00 C8 C8 00
080: 00 00 00 00 00 00 C7 3E 00 63 63 01 00 00 00 00
090: 00 00 EB 12 00 63 63 14 00 00 00 00 00 00 F1 32
0A0: 00 63 63 09 A4 FB EF 09 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 C0 12 00 53
170: 03 00 01 00 02 50 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0B
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 0A 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 B1 00 00 00 00 00 00 00 00 00
030: 00 00 B3 0A 00 00 00 00 00 00 00 00 00 00 B5 0A
040: 00 00 00 00 00 00 00 00 00 00 B6 0A 00 00 00 00
050: 00 00 00 00 00 00 B7 0A 00 00 00 00 00 00 00 00
060: 00 00 BB 00 00 00 00 00 00 00 00 00 00 00 BE 00
070: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
080: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
090: 00 00 EB 00 00 00 00 00 00 00 00 00 00 00 F1 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4E
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
Je to naprosto bezpečný program. Některé antiviry jsou paranoidní, my ho tu běžně používáme. Disk vypadá OK. Nemáte v PC něco přetaktováno?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o pomoc
Nic jsem netaktoval, ani to neumím.
Dnešní start ntb trval asi 4 minuty.
Dnešní start ntb trval asi 4 minuty.
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
Jak velký je adresář c:\Users\Petr\Plocha?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o pomoc
Konkrétně 468MB (491 110 120 bajtů)
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
To je OK. Škoda, že nemáme minidump. Bez něj asi nevymyslíme nic. Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o pomoc
Dobře, budu to sledovat a kdyby něco, tak se ozvu znovu. Zatím děkuji.
- Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o pomoc
OK, nechám to tu zatím otevřené. Zatím není zač! ![2 :)](./images/smilies/2.gif)
![2 :)](./images/smilies/2.gif)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
![Obrázek](http://www.james008.net/shop.gif)
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.