Zdravím,
prosím vás, pomohli byste mi s výstrahou na notebooku? Zahlásilo mi to nějaké aktuální hrozby. Prosím, co s tím? :-O
Děkuji, vev
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Hrozby v notebooku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Hrozby v notebooku
- Přílohy
-
- ntb výstraha.jpg (28.62 KiB) Zobrazeno 1159 x
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
Zdravím!
Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=152706 .
Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=152706 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Hrozby v notebooku
Pěkný večer, snažila jsem se provést dle návodu, ale vyhodilo mi to "log" a "info", tak snad jsou to správné logy, které potřebujete... vkládám do příspěvku a děkuji za kontrolu 
log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2022-01-27 21:18:41
Microsoft Windows 10 Home
System drive C: has 173 GB (71%) free of 243 GB
Total RAM: 6006 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:54, on 27.01.2022
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.1202)
Boot mode: Normal
Running processes:
C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe
C:\Program Files\trend micro\Uživatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho.dll
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD Crash Defender Service - Unknown owner - C:\WINDOWS\system32\amdfendrsr.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_683cbc - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @oem39.inf,%ServiceDisplayName%;Dolby DAX API Service (DolbyDAXAPI) - Dolby Laboratories - C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem45.inf,%ServiceDisplayName%;Elevoc Control Service (ElevocService) - Unknown owner - C:\WINDOWS\System32\ElevocControlService.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\97.0.4692.99\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem3.inf,%ImcSvcDisplayName%;System Interface Foundation Service (ImControllerService) - Lenovo Group Ltd. - C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @oem0.inf,%ServiceName%;Lenovo Fn and function keys service (LenovoFnAndFunctionKeys) - Lenovo(beijing) Limited - C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
O23 - Service: LenovoVantageService - Lenovo Group Ltd. - C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe
O23 - Service: @oem49.inf,%LNBITS.SVCDESC%;Lenovo Notebook ITS Service (LITSSVC) - Unknown owner - C:\WINDOWS\System32\LNBITSSvc.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) - Realtek Semiconductor - C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe
O23 - Service: @oem33.inf,%RtkBtManServ.SvcDesc%;Realtek Bluetooth Device Manager Service (RtkBtManServ) - Realtek Semiconductor Corp. - C:\WINDOWS\RtkBtManServ.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @oem19.inf,%UdcSvcDisplayName%;Universal Device Client Service (UDCService) - Unknown owner - C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9050 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5cbb8f4e-d69a-4f25-8daa-b551e7e30f92 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a57d37bf-1a19-4a57-9e8b-31f3a50a4f00 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c9475688-aba3-4210-9577-0880515a2b53 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-fa50b787-fa34-4daa-afb9-979c2dd51d1c -LifetimeId:ab4f5f93-cfd8-4e3c-b873-0e10ae10a79e -DeviceGroupId: -HostArg:0
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\WINDOWS\system32\amdfendrsr.exe
C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s IKEEXT
C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\ElevocControlService.exe
C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\WINDOWS\System32\LNBITSSvc.exe
C:\WINDOWS\RtkBtManServ.exe
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc
"C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
"C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITS
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvc
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauserv
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
atieclxx
"C:\WINDOWS\System32\DRIVER~1\FILERE~1\DAX3_S~1.INF\\DAX3API.exe" -capturestream
C:\WINDOWS\System32\AutoModeDetect.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
"ctfmon.exe"
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21113.36.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\FnHotkeyUtility.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Windows\System32\SecurityHealthSystray.exe"
"C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe" -background
"C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-169d63db-b3b8-4a34-9e46-513aa19eacc9 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-321d4f6d-503b-4c34-8c54-0d1ad369890d -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-dcbd1a38-fa6f-4a12-bd97-c10886836c5f -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cc744d3a-c38b-4ec1-9177-fe99e0b1f89b -LifetimeId:33237696-3888-4f5d-998b-939317cabd03 -DeviceGroupId: -HostArg:0
C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
-name fca31dc7-a5ef-4733-8817-0623991f8ddc -runas -pluginName IdeaNotebookPlugin -pluginVersion 1.2.78.16
-name d7dd9213-937a-43db-a5cf-e0493f6f31a4 -runas -pluginName LenovoVisionProtectionPlugin -pluginVersion 1.2.98.14
C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=97.0.4692.99 --initial-client-data=0x110,0x114,0x118,0xec,0x11c,0x7ffd327ca850,0x7ffd327ca860,0x7ffd327ca870
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAIAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1432 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=none --mojo-platform-channel-handle=2080 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=utility --mojo-platform-channel-handle=2156 /prefetch:8
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --launch-time-ticks=351763738925 --mojo-platform-channel-handle=5392 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --launch-time-ticks=351764625033 --mojo-platform-channel-handle=3212 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe" -name f5ef3397-e23e-4a40-9389-eda2209bd5a9 -runas SYSTEM -pluginName GenericTelemetryPlugin -pluginVersion 2.1.0.20
-name 922c2348-3b87-4463-a6fc-516c34d86690 -runas -pluginName GenericMessagingPlugin -pluginVersion 3.2.0.57
-name a01f0e8d-c4fe-4101-baf2-6e064de61d0c -runas -pluginName DolbyAudioPlugin -pluginVersion 1.2.240.5
"C:\WINDOWS\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe" -name 85021f57-3d7e-4e91-bd6b-8f8504351add -runas SYSTEM -pluginName LenovoAuthenticationPlugin -pluginVersion 1.3.0.13
"C:\WINDOWS\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe" -name 279263ad-0ba4-4a1f-9bc7-25172bbd28b4 -runas SYSTEM -pluginName LenovoAppScenarioPluginSystem -pluginVersion 1.2.190.5
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CaptureService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
-name e86cf9a0-b30c-4a81-a257-b8795d9c6741 -runas -pluginName GenericDisplayPlugin -pluginVersion 1.2.179.5
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe"
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" GenericTelemetryAddin C:\ProgramData\Lenovo\Vantage\Addins\\GenericTelemetryAddin\2.0.0.3\GenericTelemetryAddin.dll ce6088c4be294dc5b1b7292b7b5b01f4 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" VantageCoreAddin C:\ProgramData\Lenovo\Vantage\Addins\\VantageCoreAddin\1.0.0.28\VantageCoreAddin.dll 0fe9b1909f0f429ca1b12f01d7d6aa53 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe" DeviceSettingsHeartbeatAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsHeartbeatAddin\1.0.0.21\DeviceSettingsHeartbeatAddin.dll 11f3b4fa811545aa8e8f344e72e7f14d 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" DeviceSettingsSystemAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsSystemAddin\1.0.1.58\DeviceSettingsSystemAddin.dll de784bb65ade43bf81644ebb3c29babb 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoServiceBridgeAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoServiceBridgeAddin\1.0.0.54\LenovoServiceBridgeAddin.dll a920e7b59cdd4fdb8dc36be3bb0631b2 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe" LenovoBoostAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoBoostAddin\1.0.0.32\LenovoBoostAddin.dll 4d4e0d05bad64a79a6a96529248690b8 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoSecurityAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoSecurityAddin\1.0.0.31\LenovoSecurityAddin.dll b8fd31c3239c4b97a4b37d8d0a87a793 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=audio --mojo-platform-channel-handle=7952 /prefetch:8
C:\WINDOWS\system32\AUDIODG.EXE 0x528
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 816 820 828 8192 824 796
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --launch-time-ticks=352406922438 --mojo-platform-channel-handle=2892 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --launch-time-ticks=352422883730 --mojo-platform-channel-handle=5824 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s XblAuthManager
"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca
"C:\Users\Uživatel\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho_64.dll [2022-01-20 532352]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho.dll [2022-01-20 421760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\WINDOWS\system32\SecurityHealthSystray.exe [2019-12-07 86016]
"RtkAudUService"=C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [2020-10-14 1183968]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2022-01-23 2593128]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2021-12-07 35373696]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsQuic]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcCtnrSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"FilterAdministratorToken"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"aux1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave1"=wdmaud.drv
"aux2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.inf - install -
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2022-01-27 21:18:41 ----D---- C:\rsit
2022-01-27 21:18:41 ----D---- C:\Program Files\trend micro
2022-01-23 18:49:55 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2022-01-23 18:49:55 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\tcbloader.dll
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\hvix64.exe
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\hvax64.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\GameInput.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\sppsvc.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\sppcext.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\netlogon.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\msv1_0.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\ISM.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\GameInput.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\BFE.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\explorer.exe
2022-01-23 18:45:19 ----HD---- C:\$WinREAgent
2022-01-23 18:45:12 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2022-01-23 18:45:11 ----A---- C:\WINDOWS\system32\poqexec.exe
2022-01-15 16:47:16 ----D---- C:\Users\Uživatel\AppData\Roaming\Jpeg Resampler
2022-01-15 15:36:30 ----D---- C:\Program Files (x86)\JpegResampler2010
2022-01-15 15:26:25 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2022-01-15 15:26:00 ----D---- C:\ProgramData\Malwarebytes
2022-01-15 15:12:56 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2022-01-15 15:01:48 ----D---- C:\Program Files\CCleaner
2022-01-15 14:58:59 ----D---- C:\Program Files (x86)\DsNET Corp
2022-01-12 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2022-01-12 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2022-01-12 22:23:11 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\runas.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\msimsg.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\certutil.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\certreq.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\system32\mfcore.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\system32\browser.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\tar.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\net1.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\iasads.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\dhcpsapi.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\curl.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\archiveint.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\system32\WebClnt.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\system32\provsvc.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\tsgqec.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\runas.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\rdpudd.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\nshwfp.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\nltest.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\mstscax.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\msimsg.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\msi.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\ListSvc.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\ksetup.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\Chakra.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\drivers\PktMon.sys
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\certutil.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\certreq.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\tar.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\net1.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\mtxclu.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\mshtml.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtctm.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\iasads.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dsauth.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dataclen.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\curl.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\computecore.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\CBDHSvc.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\archiveint.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\wincredui.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\schedcli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\raschap.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netprovfw.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netjoin.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\msimg32.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\joinutil.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\gmsaclient.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\BitLockerCsp.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\system32\vertdll.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\system32\skci.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\shacctprofile.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\samcli.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\netutils.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\netmsg.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\logoncli.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\es.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\CertPolEng.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Launcher.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryCore.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryBroker.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\StateRepository.Core.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\negoexts.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\KerbClientShared.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\CertEnrollCtrl.exe
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscisvif.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscadminui.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\TSpkg.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\pku2u.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\LsaIso.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\keymgr.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\iumcrypt.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFCompanionHost.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\wincredui.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\usermgr.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\tdh.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\taskcomp.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\sppobjs.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\shutdownux.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\shell32.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\scesrv.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rastls.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rasmans.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\raschap.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rascustom.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\ntlanman.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\netprovfw.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\netjoin.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\msimg32.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\msctf.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\mf3216.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFrameworkPS.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\joinutil.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\gdi32full.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\efscore.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\djoin.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\wkssvc.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\wkscli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\srvcli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\schedcli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\schannel.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\sechost.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\ntdll.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\msobjs.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\msaudite.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\lsasrv.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\KernelBase.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\gmsaclient.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\http.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\adtschema.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\profsvc.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\logoncli.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\authz.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\winresume.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\winload.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\uReFS.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\trkwks.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\shacct.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samsrv.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samlib.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samcli.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\refsutil.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\offlinesam.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\netmsg.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\es.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\dwmcore.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\drivers\pcw.sys
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\comsvcs.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ci.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\CertPolEng.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\wpnapps.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32u.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32k.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\SettingsHandlers_User.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\netapi32.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\kerberos.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\KerbClientShared.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\drivers\bindflt.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\bindfltapi.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\wintrust.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.System.Launcher.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\windows.storage.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\win32kbase.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\profext.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\negoexts.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\cloudAP.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\certcli.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\certca.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\cdd.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\AppContracts.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscsvc.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscisvif.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscapi.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscadminui.exe
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\winlogonext.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\usercpl.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\twinui.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\TaskFlowDataEngine.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ShareHost.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ptpprov.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\PinEnrollmentHelper.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\netplwiz.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ManageCI.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\kernel32.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\kdcpw.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\deviceregistration.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\browcli.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\authui.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\agentactivationruntimewindows.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\advapi32.dll
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\vmbuspipe.dll
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\Vid.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\spacedump.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2022-01-02 17:22:40 ----D---- C:\MOJE
2021-12-29 19:34:32 ----D---- C:\WINDOWS\SystemTemp
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSXP32.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSEXT32.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\WinFax.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXST30.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSRESM.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOMPOSE.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOM.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2021-12-29 19:29:32 ----A---- C:\WINDOWS\system32\DMRServer.dll
2021-12-29 19:29:31 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2021-12-29 19:29:28 ----A---- C:\WINDOWS\system32\offreg.dll
2021-12-29 19:29:26 ----A---- C:\WINDOWS\system32\edgehtml.dll
2021-12-29 19:29:26 ----A---- C:\WINDOWS\system32\computestorage.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\TpmTool.exe
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\rtutils.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\feclient.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\rtutils.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\BioIso.exe
2021-12-29 19:29:24 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\MdmDiagnostics.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\feclient.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\efssvc.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\efslsaext.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\winsku.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\winbrand.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\kdnet.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\imagehlp.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\WinREAgent.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\wcimage.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\wc_storage.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\FntCache.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\DWrite.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\daxexec.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\wpx.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\TpmTool.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\spoolsv.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\localspl.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\FaxPrinterInstaller.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\bcdedit.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\splwow64.exe
======List of files/folders modified in the last 1 month======
2022-01-27 21:18:48 ----D---- C:\WINDOWS\prefetch
2022-01-27 21:18:41 ----RD---- C:\Program Files
2022-01-27 21:18:29 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2022-01-27 21:11:47 ----D---- C:\WINDOWS\Temp
2022-01-27 21:11:17 ----D---- C:\WINDOWS\system32\config
2022-01-27 21:09:17 ----D---- C:\WINDOWS\AppReadiness
2022-01-27 21:09:00 ----D---- C:\Program Files (x86)\Google
2022-01-27 21:06:28 ----D---- C:\WINDOWS\system32\sru
2022-01-27 21:06:18 ----D---- C:\WINDOWS\System32
2022-01-27 21:06:15 ----D---- C:\WINDOWS\system32\drivers\UMDF
2022-01-27 21:06:14 ----D---- C:\WINDOWS\system32\DriverStore
2022-01-27 21:06:14 ----D---- C:\WINDOWS\system32\catroot2
2022-01-27 21:06:13 ----D---- C:\WINDOWS\INF
2022-01-23 19:28:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-23 19:24:44 ----D---- C:\WINDOWS\WinSxS
2022-01-23 19:24:42 ----D---- C:\WINDOWS\ServiceState
2022-01-23 19:24:40 ----ASH---- C:\DumpStack.log.tmp
2022-01-23 19:24:16 ----D---- C:\WINDOWS\SysWOW64
2022-01-23 19:24:16 ----D---- C:\WINDOWS\system32\drivers
2022-01-23 19:24:16 ----D---- C:\WINDOWS\bcastdvr
2022-01-23 19:24:16 ----D---- C:\Windows
2022-01-23 19:24:01 ----D---- C:\WINDOWS\CbsTemp
2022-01-23 19:23:36 ----D---- C:\WINDOWS\system32\SleepStudy
2022-01-23 18:46:55 ----SHD---- C:\System Volume Information
2022-01-23 17:29:47 ----HD---- C:\Program Files\WindowsApps
2022-01-23 17:23:55 ----D---- C:\WINDOWS\system32\Tasks
2022-01-16 21:48:19 ----SHD---- C:\WINDOWS\Installer
2022-01-15 16:45:21 ----RD---- C:\Program Files (x86)
2022-01-15 15:26:00 ----HD---- C:\ProgramData
2022-01-15 15:12:58 ----SD---- C:\Users\Uživatel\AppData\Roaming\Microsoft
2022-01-15 15:12:48 ----D---- C:\Program Files (x86)\Microsoft
2022-01-15 13:23:54 ----D---- C:\WINDOWS\Logs
2022-01-15 13:21:31 ----RD---- C:\WINDOWS\Microsoft.NET
2022-01-15 13:21:28 ----RD---- C:\WINDOWS\assembly
2022-01-13 01:07:02 ----A---- C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-13 01:06:58 ----A---- C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-13 01:06:58 ----A---- C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-13 01:06:16 ----A---- C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-12 22:34:13 ----SD---- C:\WINDOWS\system32\DiagSvcs
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\wbem
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\en-US
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\Dism
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SystemResources
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\setup
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\oobe
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\migration
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\en-US
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\Dism
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\cs-CZ
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\CodeIntegrity
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\Boot
2022-01-12 22:19:19 ----D---- C:\Users\Uživatel\AppData\Roaming\Adobe
2022-01-12 22:14:22 ----D---- C:\WINDOWS\system32\MRT
2022-01-12 22:14:19 ----AC---- C:\WINDOWS\system32\MRT.exe
2022-01-02 15:54:05 ----D---- C:\WINDOWS\system32\Logs
2022-01-02 15:54:05 ----D---- C:\Program Files\Microsoft Update Health Tools
2021-12-29 20:06:10 ----SD---- C:\WINDOWS\system32\Microsoft
2021-12-29 20:05:16 ----D---- C:\WINDOWS\servicing
2021-12-29 19:36:47 ----D---- C:\WINDOWS\system32\WDI
2021-12-29 18:34:52 ----D---- C:\WINDOWS\system32\LogFiles
2021-12-29 18:06:06 ----D---- C:\ProgramData\Adobe
2021-12-29 18:02:51 ----D---- C:\ProgramData\Packages
2021-12-29 17:59:58 ----D---- C:\WINDOWS\system32\drivers\wd
2021-12-29 17:58:19 ----SD---- C:\ProgramData\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amdpsp;@oem36.inf,%amdpsp.SVCDESC%;AMD PSP Service; C:\WINDOWS\System32\drivers\amdpsp.sys [2020-03-24 135184]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2021-11-04 57168]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2019-12-07 88080]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2021-11-04 41984]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2019-12-07 78136]
R1 CimFS;CimFS; C:\WINDOWS\system32\drivers\CimFS.sys [2021-11-04 98304]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2019-12-07 59392]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2019-12-07 8704]
R2 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2022-01-12 149320]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2021-11-07 496640]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2020-11-19 53248]
R3 ACPIVPC;@oem21.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2021-07-26 44024]
R3 amdacpbus;@oem29.inf,%amdacpbus.SVCDESC%;Audio Coprocessr Driver for DSP; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpbus.inf_amd64_09f1c82527189d2f\amdacpbus.sys [2020-12-06 9086384]
R3 amdfendr;@oem27.inf,%AMDFENDR_svcdesc%;AMD Crash Defender Driver; C:\WINDOWS\System32\drivers\amdfendr.sys [2020-12-14 91568]
R3 amdgpio2;@oem28.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\WINDOWS\System32\drivers\amdgpio2.sys [2020-03-16 46344]
R3 amdi2c;@oem4.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\WINDOWS\System32\drivers\amdi2c.sys [2020-09-30 66864]
R3 amdwddmg;amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [2021-10-07 80471928]
R3 AtiHDAudioService;@oem42.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2020-06-09 107936]
R3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2021-12-06 1559552]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2021-12-06 110592]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2019-12-07 66576]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2020-10-14 5930072]
R3 MsQuic;@%SystemRoot%\system32\drivers\msquic.sys,-1; C:\WINDOWS\system32\drivers\msquic.sys [2020-11-19 322376]
R3 rt640x64;@oem24.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2021-07-26 1151992]
R3 RtkBtFilter;@oem33.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [2020-11-25 801296]
R3 RTWlanE;@oem9.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\System32\drivers\rtwlane.sys [2020-11-07 11582560]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2019-12-07 43832]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2019-12-07 319800]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2019-12-07 884752]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2019-12-07 172344]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2019-12-07 124216]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2019-12-07 135992]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2019-12-07 81720]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2019-12-07 105480]
S0 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2019-12-07 168464]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2019-12-07 58680]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2019-12-07 68408]
S0 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2019-12-07 138040]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2019-12-07 42296]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2019-12-07 158736]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2019-12-07 23040]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\WINDOWS\system32\drivers\Acx01000.sys [2019-12-07 415232]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2021-12-06 18432]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\WINDOWS\System32\drivers\BthA2dp.sys [2021-11-04 279040]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2021-12-06 113664]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2020-11-19 106496]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\WINDOWS\System32\drivers\BTHMINI.sys [2021-12-06 45568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2019-12-07 133632]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2019-12-07 44032]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys [2019-12-07 23040]
S3 GeneStor;@oem51.inf,%GeneStor.SvcDesc%;Genesys Logic Storage Driver; C:\WINDOWS\System32\drivers\GeneStor.sys [2020-05-19 134272]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2019-12-07 55824]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\WINDOWS\System32\drivers\hidspi.sys [2019-12-07 66560]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2021-11-04 95056]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2019-12-07 30208]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2019-12-07 1853752]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2019-12-07 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2019-12-07 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2019-12-07 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-12-07 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-12-07 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-12-07 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2019-12-07 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-12-07 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-12-07 177152]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-12-07 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2019-12-07 558904]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2020-11-19 47104]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel(R) Dynamic Device Peak Power Manager Driver; C:\WINDOWS\System32\drivers\intelpmax.sys [2019-12-07 30720]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2019-12-07 59704]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2019-12-07 537608]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2019-12-07 64016]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2022-01-15 129752]
S3 MbbCx;MBB Network Adapter Class Extension; C:\WINDOWS\system32\drivers\MbbCx.sys [2021-11-04 391168]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-12-07 65024]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2019-12-07 1131320]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2019-12-07 146232]
S3 NDKPing;NDKPing Driver; C:\WINDOWS\system32\drivers\NDKPing.sys [2019-12-07 72720]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2021-12-06 214528]
S3 PktMon;Packet Monitor Driver; C:\WINDOWS\system32\drivers\PktMon.sys [2022-01-12 130360]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2019-12-07 17408]
S3 portcfg;portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [2019-12-07 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2022-01-12 990536]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2019-12-07 213504]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2019-12-07 115712]
S3 RTSUER;@oem48.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2020-04-13 448096]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2019-12-07 35128]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2019-12-07 35128]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2021-11-17 169728]
R2 AMD Crash Defender Service;AMD Crash Defender Service; C:\WINDOWS\system32\amdfendrsr.exe [2020-12-14 513968]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe [2021-10-07 594824]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 CDPUserSvc_683cbc;Uživatelská služba platformy připojených zařízení_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 DolbyDAXAPI;@oem39.inf,%ServiceDisplayName%;Dolby DAX API Service; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2020-10-15 2173912]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 ElevocService;@oem45.inf,%ServiceDisplayName%;Elevoc Control Service; C:\WINDOWS\System32\ElevocControlService.exe [2020-11-30 164568]
R2 ImControllerService;@oem3.inf,%ImcSvcDisplayName%;System Interface Foundation Service; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-13 84264]
R2 LenovoFnAndFunctionKeys;@oem0.inf,%ServiceName%;Lenovo Fn and function keys service; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe [2021-11-21 201472]
R2 LenovoVantageService;LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [2021-12-14 31016]
R2 LITSSVC;@oem49.inf,%LNBITS.SVCDESC%;Lenovo Notebook ITS Service; C:\WINDOWS\System32\LNBITSSvc.exe [2021-02-06 1820080]
R2 OneSyncSvc_683cbc;Hostitel synchronizace_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 RtkAudioUniversalService;Realtek Audio Universal Service; C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [2020-10-14 1183968]
R2 RtkBtManServ;@oem33.inf,%RtkBtManServ.SvcDesc%;Realtek Bluetooth Device Manager Service; C:\WINDOWS\RtkBtManServ.exe [2020-11-25 779792]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2020-11-19 329504]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 CaptureService_683cbc;CaptureService_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 cbdhsvc_683cbc;Uživatelská služba schránky_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 PimIndexMaintenanceSvc_683cbc;Data kontaktů_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2021-11-04 986032]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S2 edgeupdate;Microsoft Edge Update Service (edgeupdate); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2021-08-05 214952]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-12-05 156232]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AarSvc_683cbc;Agent Activation Runtime_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BcastDVRUserService_683cbc;Uživatelská služba pro GameDVR a vysílání her_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BluetoothUserService_683cbc;Služba pro podporu uživatelů Bluetooth_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 ConsentUxUserSvc_683cbc;ConsentUX_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-11-04 382696]
S3 CredentialEnrollmentManagerUserSvc_683cbc;CredentialEnrollmentManagerUserSvc_683cbc; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-11-04 382696]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DeviceAssociationBrokerSvc_683cbc;DeviceAssociationBroker_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicePickerUserSvc_683cbc;DevicePicker_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicesFlowUserSvc_683cbc;Tok zařízení_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2022-01-12 94208]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 edgeupdatem;Microsoft Edge Update Service (edgeupdatem); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2021-08-05 214952]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-11-08 46184]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 GoogleChromeElevationService;Google Chrome Elevation Service (GoogleChromeElevationService); C:\Program Files\Google\Chrome\Application\97.0.4692.99\elevation_service.exe [2022-01-19 1470296]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-12-05 156232]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MessagingService_683cbc;Služba zasílání zpráv_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MicrosoftEdgeElevationService;Microsoft Edge Elevation Service (MicrosoftEdgeElevationService); C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\elevation_service.exe [2022-01-20 1610128]
S3 MixedRealityOpenXRSvc;@%SystemRoot%\system32\MixedRealityRuntime.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2021-11-19 243128]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [2021-11-04 106496]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PrintWorkflowUserSvc_683cbc;PrintWorkflow_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2021-11-04 1265152]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
-----------------EOF-----------------
log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2022-01-27 21:18:41
Microsoft Windows 10 Home
System drive C: has 173 GB (71%) free of 243 GB
Total RAM: 6006 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:54, on 27.01.2022
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.1202)
Boot mode: Normal
Running processes:
C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe
C:\Program Files\trend micro\Uživatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho.dll
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD Crash Defender Service - Unknown owner - C:\WINDOWS\system32\amdfendrsr.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_683cbc - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @oem39.inf,%ServiceDisplayName%;Dolby DAX API Service (DolbyDAXAPI) - Dolby Laboratories - C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem45.inf,%ServiceDisplayName%;Elevoc Control Service (ElevocService) - Unknown owner - C:\WINDOWS\System32\ElevocControlService.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\97.0.4692.99\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem3.inf,%ImcSvcDisplayName%;System Interface Foundation Service (ImControllerService) - Lenovo Group Ltd. - C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @oem0.inf,%ServiceName%;Lenovo Fn and function keys service (LenovoFnAndFunctionKeys) - Lenovo(beijing) Limited - C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
O23 - Service: LenovoVantageService - Lenovo Group Ltd. - C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe
O23 - Service: @oem49.inf,%LNBITS.SVCDESC%;Lenovo Notebook ITS Service (LITSSVC) - Unknown owner - C:\WINDOWS\System32\LNBITSSvc.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) - Realtek Semiconductor - C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe
O23 - Service: @oem33.inf,%RtkBtManServ.SvcDesc%;Realtek Bluetooth Device Manager Service (RtkBtManServ) - Realtek Semiconductor Corp. - C:\WINDOWS\RtkBtManServ.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @oem19.inf,%UdcSvcDisplayName%;Universal Device Client Service (UDCService) - Unknown owner - C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9050 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-5cbb8f4e-d69a-4f25-8daa-b551e7e30f92 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a57d37bf-1a19-4a57-9e8b-31f3a50a4f00 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c9475688-aba3-4210-9577-0880515a2b53 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-fa50b787-fa34-4daa-afb9-979c2dd51d1c -LifetimeId:ab4f5f93-cfd8-4e3c-b873-0e10ae10a79e -DeviceGroupId: -HostArg:0
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\WINDOWS\system32\amdfendrsr.exe
C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s IKEEXT
C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\WINDOWS\System32\ElevocControlService.exe
C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\WINDOWS\System32\LNBITSSvc.exe
C:\WINDOWS\RtkBtManServ.exe
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc
"C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
"C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc
C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITS
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvc
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauserv
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"fontdrvhost.exe"
"dwm.exe"
atieclxx
"C:\WINDOWS\System32\DRIVER~1\FILERE~1\DAX3_S~1.INF\\DAX3API.exe" -capturestream
C:\WINDOWS\System32\AutoModeDetect.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
"ctfmon.exe"
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21113.36.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\FnHotkeyUtility.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Windows\System32\SecurityHealthSystray.exe"
"C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe" -background
"C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-169d63db-b3b8-4a34-9e46-513aa19eacc9 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-321d4f6d-503b-4c34-8c54-0d1ad369890d -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-dcbd1a38-fa6f-4a12-bd97-c10886836c5f -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cc744d3a-c38b-4ec1-9177-fe99e0b1f89b -LifetimeId:33237696-3888-4f5d-998b-939317cabd03 -DeviceGroupId: -HostArg:0
C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
-name fca31dc7-a5ef-4733-8817-0623991f8ddc -runas -pluginName IdeaNotebookPlugin -pluginVersion 1.2.78.16
-name d7dd9213-937a-43db-a5cf-e0493f6f31a4 -runas -pluginName LenovoVisionProtectionPlugin -pluginVersion 1.2.98.14
C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=97.0.4692.99 --initial-client-data=0x110,0x114,0x118,0xec,0x11c,0x7ffd327ca850,0x7ffd327ca860,0x7ffd327ca870
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAIAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1432 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=none --mojo-platform-channel-handle=2080 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=utility --mojo-platform-channel-handle=2156 /prefetch:8
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --launch-time-ticks=351763738925 --mojo-platform-channel-handle=5392 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --launch-time-ticks=351764625033 --mojo-platform-channel-handle=3212 /prefetch:1
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe" -name f5ef3397-e23e-4a40-9389-eda2209bd5a9 -runas SYSTEM -pluginName GenericTelemetryPlugin -pluginVersion 2.1.0.20
-name 922c2348-3b87-4463-a6fc-516c34d86690 -runas -pluginName GenericMessagingPlugin -pluginVersion 3.2.0.57
-name a01f0e8d-c4fe-4101-baf2-6e064de61d0c -runas -pluginName DolbyAudioPlugin -pluginVersion 1.2.240.5
"C:\WINDOWS\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe" -name 85021f57-3d7e-4e91-bd6b-8f8504351add -runas SYSTEM -pluginName LenovoAuthenticationPlugin -pluginVersion 1.3.0.13
"C:\WINDOWS\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe" -name 279263ad-0ba4-4a1f-9bc7-25172bbd28b4 -runas SYSTEM -pluginName LenovoAppScenarioPluginSystem -pluginVersion 1.2.190.5
C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CaptureService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
-name e86cf9a0-b30c-4a81-a257-b8795d9c6741 -runas -pluginName GenericDisplayPlugin -pluginVersion 1.2.179.5
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe"
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" GenericTelemetryAddin C:\ProgramData\Lenovo\Vantage\Addins\\GenericTelemetryAddin\2.0.0.3\GenericTelemetryAddin.dll ce6088c4be294dc5b1b7292b7b5b01f4 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" VantageCoreAddin C:\ProgramData\Lenovo\Vantage\Addins\\VantageCoreAddin\1.0.0.28\VantageCoreAddin.dll 0fe9b1909f0f429ca1b12f01d7d6aa53 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe" DeviceSettingsHeartbeatAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsHeartbeatAddin\1.0.0.21\DeviceSettingsHeartbeatAddin.dll 11f3b4fa811545aa8e8f344e72e7f14d 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" DeviceSettingsSystemAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsSystemAddin\1.0.1.58\DeviceSettingsSystemAddin.dll de784bb65ade43bf81644ebb3c29babb 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoServiceBridgeAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoServiceBridgeAddin\1.0.0.54\LenovoServiceBridgeAddin.dll a920e7b59cdd4fdb8dc36be3bb0631b2 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe" LenovoBoostAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoBoostAddin\1.0.0.32\LenovoBoostAddin.dll 4d4e0d05bad64a79a6a96529248690b8 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoSecurityAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoSecurityAddin\1.0.0.31\LenovoSecurityAddin.dll b8fd31c3239c4b97a4b37d8d0a87a793 010a9fde-85f5-4463-8d25-304c825c32e4
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --service-sandbox-type=audio --mojo-platform-channel-handle=7952 /prefetch:8
C:\WINDOWS\system32\AUDIODG.EXE 0x528
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 816 820 828 8192 824 796
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --launch-time-ticks=352406922438 --mojo-platform-channel-handle=2892 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1680,858064504382945603,4994467319994047807,131072 --lang=cs --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --launch-time-ticks=352422883730 --mojo-platform-channel-handle=5824 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s XblAuthManager
"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca
"C:\Users\Uživatel\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho_64.dll [2022-01-20 532352]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\BHO\ie_to_edge_bho.dll [2022-01-20 421760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\WINDOWS\system32\SecurityHealthSystray.exe [2019-12-07 86016]
"RtkAudUService"=C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [2020-10-14 1183968]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Uživatel\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2022-01-23 2593128]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2021-12-07 35373696]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsQuic]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcCtnrSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"FilterAdministratorToken"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"aux1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave1"=wdmaud.drv
"aux2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.inf - install -
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2022-01-27 21:18:41 ----D---- C:\rsit
2022-01-27 21:18:41 ----D---- C:\Program Files\trend micro
2022-01-23 18:49:55 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2022-01-23 18:49:55 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\tcbloader.dll
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\hvix64.exe
2022-01-23 18:49:54 ----A---- C:\WINDOWS\system32\hvax64.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\SYSWOW64\GameInput.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\sppsvc.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\sppcext.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\netlogon.dll
2022-01-23 18:49:53 ----A---- C:\WINDOWS\system32\msv1_0.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\ISM.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\GameInput.dll
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2022-01-23 18:49:52 ----A---- C:\WINDOWS\system32\BFE.DLL
2022-01-23 18:49:52 ----A---- C:\WINDOWS\explorer.exe
2022-01-23 18:45:19 ----HD---- C:\$WinREAgent
2022-01-23 18:45:12 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2022-01-23 18:45:11 ----A---- C:\WINDOWS\system32\poqexec.exe
2022-01-15 16:47:16 ----D---- C:\Users\Uživatel\AppData\Roaming\Jpeg Resampler
2022-01-15 15:36:30 ----D---- C:\Program Files (x86)\JpegResampler2010
2022-01-15 15:26:25 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2022-01-15 15:26:00 ----D---- C:\ProgramData\Malwarebytes
2022-01-15 15:12:56 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2022-01-15 15:01:48 ----D---- C:\Program Files\CCleaner
2022-01-15 14:58:59 ----D---- C:\Program Files (x86)\DsNET Corp
2022-01-12 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2022-01-12 22:23:11 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2022-01-12 22:23:11 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\runas.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\msimsg.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\certutil.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\SYSWOW64\certreq.exe
2022-01-12 22:23:10 ----A---- C:\WINDOWS\system32\mfcore.dll
2022-01-12 22:23:10 ----A---- C:\WINDOWS\system32\browser.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\tar.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\net1.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\iasads.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\dhcpsapi.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\curl.exe
2022-01-12 22:23:09 ----A---- C:\WINDOWS\SYSWOW64\archiveint.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\system32\WebClnt.dll
2022-01-12 22:23:09 ----A---- C:\WINDOWS\system32\provsvc.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\tsgqec.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\runas.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\rdpudd.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\nshwfp.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\nltest.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\mstscax.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\msimsg.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\msi.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\ListSvc.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\ksetup.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\Chakra.dll
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\drivers\PktMon.sys
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\certutil.exe
2022-01-12 22:23:08 ----A---- C:\WINDOWS\system32\certreq.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\tar.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\net1.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\mtxclu.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\mshtml.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtctm.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\iasads.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dsauth.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\dataclen.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\curl.exe
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\computecore.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\CBDHSvc.dll
2022-01-12 22:23:07 ----A---- C:\WINDOWS\system32\archiveint.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\wincredui.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\schedcli.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\raschap.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netprovfw.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netjoin.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\msimg32.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\joinutil.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\gmsaclient.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\SYSWOW64\BitLockerCsp.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\system32\vertdll.dll
2022-01-12 22:23:06 ----A---- C:\WINDOWS\system32\skci.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\shacctprofile.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\samcli.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\netutils.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\netmsg.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\logoncli.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\es.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\CertPolEng.dll
2022-01-12 22:23:05 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Launcher.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryCore.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryBroker.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\StateRepository.Core.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\negoexts.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\KerbClientShared.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\CertEnrollCtrl.exe
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2022-01-12 22:23:04 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscisvif.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\wscadminui.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\TSpkg.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\pku2u.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\LsaIso.exe
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\keymgr.dll
2022-01-12 22:23:03 ----A---- C:\WINDOWS\system32\iumcrypt.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\WUDFCompanionHost.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\wincredui.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\usermgr.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\tdh.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\taskcomp.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\sppobjs.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\shutdownux.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\shell32.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\scesrv.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rastls.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rasmans.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\raschap.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\rascustom.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\ntlanman.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\netprovfw.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\netjoin.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\msimg32.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\msctf.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\mf3216.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFrameworkPS.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\joinutil.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\gdi32full.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\efscore.dll
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\djoin.exe
2022-01-12 22:23:02 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\wkssvc.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\wkscli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\srvcli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\schedcli.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\schannel.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\sechost.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\ntdll.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\msobjs.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\msaudite.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\lsasrv.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\KernelBase.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\gmsaclient.dll
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\drivers\http.sys
2022-01-12 22:23:01 ----A---- C:\WINDOWS\system32\adtschema.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\profsvc.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\logoncli.dll
2022-01-12 22:23:00 ----A---- C:\WINDOWS\system32\authz.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\winresume.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\winload.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\uReFS.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\trkwks.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\shacct.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samsrv.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samlib.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\samcli.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\refsutil.exe
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\offlinesam.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\netmsg.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\es.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\dwmcore.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\drivers\pcw.sys
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\comsvcs.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ci.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\CertPolEng.dll
2022-01-12 22:22:59 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\wpnapps.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32u.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\win32k.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\SettingsHandlers_User.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\netapi32.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\kerberos.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\KerbClientShared.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\drivers\bindflt.sys
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\bindfltapi.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2022-01-12 22:22:58 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\wintrust.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.System.Launcher.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\windows.storage.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\win32kbase.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\profext.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\negoexts.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\cloudAP.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\certcli.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\certca.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\cdd.dll
2022-01-12 22:22:57 ----A---- C:\WINDOWS\system32\AppContracts.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscsvc.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscisvif.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscapi.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\wscadminui.exe
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\winlogonext.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\usercpl.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\twinui.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\TaskFlowDataEngine.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ShareHost.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ptpprov.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\PinEnrollmentHelper.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\netplwiz.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\ManageCI.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\kernel32.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\kdcpw.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\deviceregistration.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\browcli.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\authui.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\agentactivationruntimewindows.dll
2022-01-12 22:22:56 ----A---- C:\WINDOWS\system32\advapi32.dll
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\vmbuspipe.dll
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\Vid.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\spacedump.sys
2022-01-12 22:22:55 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2022-01-02 17:22:40 ----D---- C:\MOJE
2021-12-29 19:34:32 ----D---- C:\WINDOWS\SystemTemp
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSXP32.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSEXT32.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\WinFax.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXST30.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSRESM.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOMPOSE.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSCOM.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2021-12-29 19:29:34 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2021-12-29 19:29:32 ----A---- C:\WINDOWS\system32\DMRServer.dll
2021-12-29 19:29:31 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2021-12-29 19:29:28 ----A---- C:\WINDOWS\system32\offreg.dll
2021-12-29 19:29:26 ----A---- C:\WINDOWS\system32\edgehtml.dll
2021-12-29 19:29:26 ----A---- C:\WINDOWS\system32\computestorage.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\TpmTool.exe
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\rtutils.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\feclient.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\rtutils.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2021-12-29 19:29:25 ----A---- C:\WINDOWS\system32\BioIso.exe
2021-12-29 19:29:24 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\MdmDiagnostics.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\feclient.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\efssvc.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\efslsaext.dll
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2021-12-29 19:29:24 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\winsku.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\winbrand.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\kdnet.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\imagehlp.dll
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2021-12-29 19:29:23 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\WinREAgent.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\wcimage.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\wc_storage.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\FntCache.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\DWrite.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\daxexec.dll
2021-12-29 19:29:22 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\wpx.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\TpmTool.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\spoolsv.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\localspl.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\FaxPrinterInstaller.dll
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2021-12-29 19:29:21 ----A---- C:\WINDOWS\system32\bcdedit.exe
2021-12-29 19:29:21 ----A---- C:\WINDOWS\splwow64.exe
======List of files/folders modified in the last 1 month======
2022-01-27 21:18:48 ----D---- C:\WINDOWS\prefetch
2022-01-27 21:18:41 ----RD---- C:\Program Files
2022-01-27 21:18:29 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2022-01-27 21:11:47 ----D---- C:\WINDOWS\Temp
2022-01-27 21:11:17 ----D---- C:\WINDOWS\system32\config
2022-01-27 21:09:17 ----D---- C:\WINDOWS\AppReadiness
2022-01-27 21:09:00 ----D---- C:\Program Files (x86)\Google
2022-01-27 21:06:28 ----D---- C:\WINDOWS\system32\sru
2022-01-27 21:06:18 ----D---- C:\WINDOWS\System32
2022-01-27 21:06:15 ----D---- C:\WINDOWS\system32\drivers\UMDF
2022-01-27 21:06:14 ----D---- C:\WINDOWS\system32\DriverStore
2022-01-27 21:06:14 ----D---- C:\WINDOWS\system32\catroot2
2022-01-27 21:06:13 ----D---- C:\WINDOWS\INF
2022-01-23 19:28:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-23 19:24:44 ----D---- C:\WINDOWS\WinSxS
2022-01-23 19:24:42 ----D---- C:\WINDOWS\ServiceState
2022-01-23 19:24:40 ----ASH---- C:\DumpStack.log.tmp
2022-01-23 19:24:16 ----D---- C:\WINDOWS\SysWOW64
2022-01-23 19:24:16 ----D---- C:\WINDOWS\system32\drivers
2022-01-23 19:24:16 ----D---- C:\WINDOWS\bcastdvr
2022-01-23 19:24:16 ----D---- C:\Windows
2022-01-23 19:24:01 ----D---- C:\WINDOWS\CbsTemp
2022-01-23 19:23:36 ----D---- C:\WINDOWS\system32\SleepStudy
2022-01-23 18:46:55 ----SHD---- C:\System Volume Information
2022-01-23 17:29:47 ----HD---- C:\Program Files\WindowsApps
2022-01-23 17:23:55 ----D---- C:\WINDOWS\system32\Tasks
2022-01-16 21:48:19 ----SHD---- C:\WINDOWS\Installer
2022-01-15 16:45:21 ----RD---- C:\Program Files (x86)
2022-01-15 15:26:00 ----HD---- C:\ProgramData
2022-01-15 15:12:58 ----SD---- C:\Users\Uživatel\AppData\Roaming\Microsoft
2022-01-15 15:12:48 ----D---- C:\Program Files (x86)\Microsoft
2022-01-15 13:23:54 ----D---- C:\WINDOWS\Logs
2022-01-15 13:21:31 ----RD---- C:\WINDOWS\Microsoft.NET
2022-01-15 13:21:28 ----RD---- C:\WINDOWS\assembly
2022-01-13 01:07:02 ----A---- C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-13 01:06:58 ----A---- C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-13 01:06:58 ----A---- C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-13 01:06:16 ----A---- C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-12 22:34:13 ----SD---- C:\WINDOWS\system32\DiagSvcs
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\wbem
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\en-US
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\Dism
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2022-01-12 22:34:13 ----D---- C:\WINDOWS\SystemResources
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\setup
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\oobe
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\migration
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\en-US
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\Dism
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\cs-CZ
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\CodeIntegrity
2022-01-12 22:34:13 ----D---- C:\WINDOWS\system32\Boot
2022-01-12 22:19:19 ----D---- C:\Users\Uživatel\AppData\Roaming\Adobe
2022-01-12 22:14:22 ----D---- C:\WINDOWS\system32\MRT
2022-01-12 22:14:19 ----AC---- C:\WINDOWS\system32\MRT.exe
2022-01-02 15:54:05 ----D---- C:\WINDOWS\system32\Logs
2022-01-02 15:54:05 ----D---- C:\Program Files\Microsoft Update Health Tools
2021-12-29 20:06:10 ----SD---- C:\WINDOWS\system32\Microsoft
2021-12-29 20:05:16 ----D---- C:\WINDOWS\servicing
2021-12-29 19:36:47 ----D---- C:\WINDOWS\system32\WDI
2021-12-29 18:34:52 ----D---- C:\WINDOWS\system32\LogFiles
2021-12-29 18:06:06 ----D---- C:\ProgramData\Adobe
2021-12-29 18:02:51 ----D---- C:\ProgramData\Packages
2021-12-29 17:59:58 ----D---- C:\WINDOWS\system32\drivers\wd
2021-12-29 17:58:19 ----SD---- C:\ProgramData\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amdpsp;@oem36.inf,%amdpsp.SVCDESC%;AMD PSP Service; C:\WINDOWS\System32\drivers\amdpsp.sys [2020-03-24 135184]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2021-11-04 57168]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2019-12-07 88080]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2021-11-04 41984]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2019-12-07 78136]
R1 CimFS;CimFS; C:\WINDOWS\system32\drivers\CimFS.sys [2021-11-04 98304]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2019-12-07 59392]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2019-12-07 8704]
R2 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2022-01-12 149320]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2021-11-07 496640]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2020-11-19 53248]
R3 ACPIVPC;@oem21.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2021-07-26 44024]
R3 amdacpbus;@oem29.inf,%amdacpbus.SVCDESC%;Audio Coprocessr Driver for DSP; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpbus.inf_amd64_09f1c82527189d2f\amdacpbus.sys [2020-12-06 9086384]
R3 amdfendr;@oem27.inf,%AMDFENDR_svcdesc%;AMD Crash Defender Driver; C:\WINDOWS\System32\drivers\amdfendr.sys [2020-12-14 91568]
R3 amdgpio2;@oem28.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\WINDOWS\System32\drivers\amdgpio2.sys [2020-03-16 46344]
R3 amdi2c;@oem4.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\WINDOWS\System32\drivers\amdi2c.sys [2020-09-30 66864]
R3 amdwddmg;amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [2021-10-07 80471928]
R3 AtiHDAudioService;@oem42.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2020-06-09 107936]
R3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2021-12-06 1559552]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2021-12-06 110592]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2019-12-07 66576]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2020-10-14 5930072]
R3 MsQuic;@%SystemRoot%\system32\drivers\msquic.sys,-1; C:\WINDOWS\system32\drivers\msquic.sys [2020-11-19 322376]
R3 rt640x64;@oem24.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2021-07-26 1151992]
R3 RtkBtFilter;@oem33.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [2020-11-25 801296]
R3 RTWlanE;@oem9.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\System32\drivers\rtwlane.sys [2020-11-07 11582560]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2019-12-07 43832]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2019-12-07 319800]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2019-12-07 884752]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2019-12-07 172344]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2019-12-07 124216]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2019-12-07 135992]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2019-12-07 81720]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2019-12-07 105480]
S0 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2019-12-07 168464]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2019-12-07 58680]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2019-12-07 68408]
S0 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2019-12-07 138040]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2019-12-07 42296]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2019-12-07 158736]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2019-12-07 23040]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\WINDOWS\system32\drivers\Acx01000.sys [2019-12-07 415232]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2021-12-06 18432]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\WINDOWS\System32\drivers\BthA2dp.sys [2021-11-04 279040]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2021-12-06 113664]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2020-11-19 106496]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\WINDOWS\System32\drivers\BTHMINI.sys [2021-12-06 45568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2019-12-07 133632]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2019-12-07 44032]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys [2019-12-07 23040]
S3 GeneStor;@oem51.inf,%GeneStor.SvcDesc%;Genesys Logic Storage Driver; C:\WINDOWS\System32\drivers\GeneStor.sys [2020-05-19 134272]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2019-12-07 55824]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\WINDOWS\System32\drivers\hidspi.sys [2019-12-07 66560]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2021-11-04 95056]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2019-12-07 30208]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2019-12-07 1853752]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2019-12-07 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2019-12-07 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2019-12-07 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-12-07 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-12-07 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-12-07 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2019-12-07 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-12-07 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-12-07 177152]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-12-07 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2019-12-07 558904]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2020-11-19 47104]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel(R) Dynamic Device Peak Power Manager Driver; C:\WINDOWS\System32\drivers\intelpmax.sys [2019-12-07 30720]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2019-12-07 59704]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2019-12-07 537608]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2019-12-07 64016]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2022-01-15 129752]
S3 MbbCx;MBB Network Adapter Class Extension; C:\WINDOWS\system32\drivers\MbbCx.sys [2021-11-04 391168]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-12-07 65024]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2019-12-07 1131320]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2019-12-07 146232]
S3 NDKPing;NDKPing Driver; C:\WINDOWS\system32\drivers\NDKPing.sys [2019-12-07 72720]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2021-12-06 214528]
S3 PktMon;Packet Monitor Driver; C:\WINDOWS\system32\drivers\PktMon.sys [2022-01-12 130360]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2019-12-07 17408]
S3 portcfg;portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [2019-12-07 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2022-01-12 990536]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2019-12-07 213504]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2019-12-07 115712]
S3 RTSUER;@oem48.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2020-04-13 448096]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2019-12-07 35128]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2019-12-07 35128]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2021-11-17 169728]
R2 AMD Crash Defender Service;AMD Crash Defender Service; C:\WINDOWS\system32\amdfendrsr.exe [2020-12-14 513968]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe [2021-10-07 594824]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 CDPUserSvc_683cbc;Uživatelská služba platformy připojených zařízení_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 DolbyDAXAPI;@oem39.inf,%ServiceDisplayName%;Dolby DAX API Service; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2020-10-15 2173912]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R2 ElevocService;@oem45.inf,%ServiceDisplayName%;Elevoc Control Service; C:\WINDOWS\System32\ElevocControlService.exe [2020-11-30 164568]
R2 ImControllerService;@oem3.inf,%ImcSvcDisplayName%;System Interface Foundation Service; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-13 84264]
R2 LenovoFnAndFunctionKeys;@oem0.inf,%ServiceName%;Lenovo Fn and function keys service; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe [2021-11-21 201472]
R2 LenovoVantageService;LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [2021-12-14 31016]
R2 LITSSVC;@oem49.inf,%LNBITS.SVCDESC%;Lenovo Notebook ITS Service; C:\WINDOWS\System32\LNBITSSvc.exe [2021-02-06 1820080]
R2 OneSyncSvc_683cbc;Hostitel synchronizace_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R2 RtkAudioUniversalService;Realtek Audio Universal Service; C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [2020-10-14 1183968]
R2 RtkBtManServ;@oem33.inf,%RtkBtManServ.SvcDesc%;Realtek Bluetooth Device Manager Service; C:\WINDOWS\RtkBtManServ.exe [2020-11-25 779792]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2020-11-19 329504]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 CaptureService_683cbc;CaptureService_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 cbdhsvc_683cbc;Uživatelská služba schránky_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 PimIndexMaintenanceSvc_683cbc;Data kontaktů_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2021-11-04 986032]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S2 edgeupdate;Microsoft Edge Update Service (edgeupdate); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2021-08-05 214952]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-12-05 156232]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AarSvc_683cbc;Agent Activation Runtime_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BcastDVRUserService_683cbc;Uživatelská služba pro GameDVR a vysílání her_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BluetoothUserService_683cbc;Služba pro podporu uživatelů Bluetooth_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 ConsentUxUserSvc_683cbc;ConsentUX_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-11-04 382696]
S3 CredentialEnrollmentManagerUserSvc_683cbc;CredentialEnrollmentManagerUserSvc_683cbc; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-11-04 382696]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DeviceAssociationBrokerSvc_683cbc;DeviceAssociationBroker_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicePickerUserSvc_683cbc;DevicePicker_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevicesFlowUserSvc_683cbc;Tok zařízení_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2022-01-12 94208]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 edgeupdatem;Microsoft Edge Update Service (edgeupdatem); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2021-08-05 214952]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-11-08 46184]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 GoogleChromeElevationService;Google Chrome Elevation Service (GoogleChromeElevationService); C:\Program Files\Google\Chrome\Application\97.0.4692.99\elevation_service.exe [2022-01-19 1470296]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-12-05 156232]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MessagingService_683cbc;Služba zasílání zpráv_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MicrosoftEdgeElevationService;Microsoft Edge Elevation Service (MicrosoftEdgeElevationService); C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\elevation_service.exe [2022-01-20 1610128]
S3 MixedRealityOpenXRSvc;@%SystemRoot%\system32\MixedRealityRuntime.dll,-101; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2021-11-19 243128]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [2021-11-04 106496]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PrintWorkflowUserSvc_683cbc;PrintWorkflow_683cbc; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2021-11-04 1265152]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2020-11-19 57360]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2020-11-19 57360]
-----------------EOF-----------------
Re: Hrozby v notebooku
a info:
info.txt logfile of random's system information tool 1.10 2022-01-27 21:18:56
======MBR======
0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005AE36342000000000200EEFE7F9901000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA
======Uninstall list======
-->"C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
Adobe Acrobat Reader DC - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AC0F074E4100}
Adobe Refresh Manager-->MsiExec.exe /I{AC76BA86-0804-1033-1959-001824458876}
aTube Catcher-->C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\uninstall.exe
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
IrfanView 4.59 (32-bit)-->"C:\Program Files (x86)\IrfanView\iv_uninstall.exe"
Jpeg Resampler Vs 6+-->"C:\Program Files (x86)\JpegResampler2010\unins000.exe"
Kontrola stavu osobního počítače s Windows-->MsiExec.exe /X{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}
Lenovo System Update-->"C:\Program Files (x86)\Lenovo\System Update\unins000.exe"
Lenovo Vantage Service-->"C:\Program Files (x86)\Lenovo\VantageService\\3.10.26.0\Uninstall.exe"
LibreOffice 7.2.3.2-->MsiExec.exe /I{81490660-3C36-47B4-AE9F-73B6C5BD4F98}
Microsoft Edge-->"C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
Microsoft Update Health Tools-->MsiExec.exe /X{E876418F-BE59-4D8C-B9A5-74B056B676FA}
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720-->"C:\ProgramData\Package Cache\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}\VC_redist.x64.exe" /uninstall
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.26.28720-->MsiExec.exe /I{CB4A0FDE-1126-4AE2-97C6-A243692C3D95}
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.26.28720-->MsiExec.exe /I{DD1EC0FD-3F0A-4740-A05E-1DCD14A6B0D1}
Mozilla Firefox (x64 cs)-->"C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Skype verze 8.79-->"C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe"
VLC media player-->"C:\Program Files\VideoLAN\VLC\uninstall.exe"
======System event log======
Computer Name: WIN-90BQ4M3842Q
Event Code: 20
Message: Poslední stav úspěšného vypnutí byl true. Poslední stav úspěšného spuštění byl true.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-Boot
Time Written: 20211206013956.671993-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 153
Message: Zabezpečení založené na virtualizaci (zásady: 0) je disabled.
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Boot
Time Written: 20211206013956.671930-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20211206014005.784423-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 6009
Message: Microsoft (R) Windows (R) 10.00. 19043 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20211206014005.784423-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 12
Message: Operační systém se spustil v systémovém čase 2021-12-06T01:39:56.500000000Z.
Record Number: 1
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20211206013956.671883-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
=====Application event log=====
Computer Name: WIN-90BQ4M3842Q
Event Code: 0
Message: Služba byla úspěšně spuštěna.
Record Number: 5
Source Name: ImControllerService
Time Written: 20211206014007.143890-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 0
Message: Service stopped.
Record Number: 4
Source Name: edgeupdate
Time Written: 20211206014006.393838-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 5615
Message: Služba WMI (Windows Management Instrumentation) byla úspěšně spuštěna.
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20211206014006.198169-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.
Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20211206014005.878452-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20211206014005.878178-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x1dc
Název nového procesu: C:\Windows\System32\autochk.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x1b4
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.420820-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x1b4
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.160186-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4826
Message: Načetla se konfigurační data spouštění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Obecné nastavení:
Možnosti načtení: -
Upřesňující možnosti: Ne
Zásady přístupu ke konfiguraci: Výchozí
Protokolování systémových událostí: Ne
Ladění jádra: Ne
Typ spuštění VSM: Vypnuto
Nastavení podpisu:
Testovací podepsání: Ne
Podepsání za běhu: Ne
Zakázat kontroly integrity: Ne
Nastavení HyperVisoru:
Možnosti načtení HyperVisoru: -
Typ spuštění HyperVisoru: Vypnuto
Ladění HyperVisoru: Ne
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157515-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4696
Message: Primární token byl přiřazen k procesu.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Informace o procesu:
ID procesu: 0x4
Název procesu:
Cílový proces:
ID cílového procesu: 0x7c
Název cílového procesu: Registry
Informace o novému tokenu:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157512-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x7c
Název nového procesu: Registry
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157503-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"DriverData"=C:\Windows\System32\Drivers\DriverData
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"PSModulePath"=%ProgramFiles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"NUMBER_OF_PROCESSORS"=8
"PROCESSOR_LEVEL"=23
"PROCESSOR_IDENTIFIER"=AMD64 Family 23 Model 104 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=6801
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.10 2022-01-27 21:18:56
======MBR======
0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005AE36342000000000200EEFE7F9901000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA
======Uninstall list======
-->"C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
Adobe Acrobat Reader DC - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AC0F074E4100}
Adobe Refresh Manager-->MsiExec.exe /I{AC76BA86-0804-1033-1959-001824458876}
aTube Catcher-->C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\uninstall.exe
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
IrfanView 4.59 (32-bit)-->"C:\Program Files (x86)\IrfanView\iv_uninstall.exe"
Jpeg Resampler Vs 6+-->"C:\Program Files (x86)\JpegResampler2010\unins000.exe"
Kontrola stavu osobního počítače s Windows-->MsiExec.exe /X{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}
Lenovo System Update-->"C:\Program Files (x86)\Lenovo\System Update\unins000.exe"
Lenovo Vantage Service-->"C:\Program Files (x86)\Lenovo\VantageService\\3.10.26.0\Uninstall.exe"
LibreOffice 7.2.3.2-->MsiExec.exe /I{81490660-3C36-47B4-AE9F-73B6C5BD4F98}
Microsoft Edge-->"C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.69\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
Microsoft Update Health Tools-->MsiExec.exe /X{E876418F-BE59-4D8C-B9A5-74B056B676FA}
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720-->"C:\ProgramData\Package Cache\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}\VC_redist.x64.exe" /uninstall
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.26.28720-->MsiExec.exe /I{CB4A0FDE-1126-4AE2-97C6-A243692C3D95}
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.26.28720-->MsiExec.exe /I{DD1EC0FD-3F0A-4740-A05E-1DCD14A6B0D1}
Mozilla Firefox (x64 cs)-->"C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Skype verze 8.79-->"C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe"
VLC media player-->"C:\Program Files\VideoLAN\VLC\uninstall.exe"
======System event log======
Computer Name: WIN-90BQ4M3842Q
Event Code: 20
Message: Poslední stav úspěšného vypnutí byl true. Poslední stav úspěšného spuštění byl true.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-Boot
Time Written: 20211206013956.671993-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 153
Message: Zabezpečení založené na virtualizaci (zásady: 0) je disabled.
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Boot
Time Written: 20211206013956.671930-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20211206014005.784423-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 6009
Message: Microsoft (R) Windows (R) 10.00. 19043 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20211206014005.784423-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 12
Message: Operační systém se spustil v systémovém čase 2021-12-06T01:39:56.500000000Z.
Record Number: 1
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20211206013956.671883-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
=====Application event log=====
Computer Name: WIN-90BQ4M3842Q
Event Code: 0
Message: Služba byla úspěšně spuštěna.
Record Number: 5
Source Name: ImControllerService
Time Written: 20211206014007.143890-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 0
Message: Service stopped.
Record Number: 4
Source Name: edgeupdate
Time Written: 20211206014006.393838-000
Event Type: Informace
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 5615
Message: Služba WMI (Windows Management Instrumentation) byla úspěšně spuštěna.
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20211206014006.198169-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.
Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20211206014005.878452-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: WIN-90BQ4M3842Q
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20211206014005.878178-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x1dc
Název nového procesu: C:\Windows\System32\autochk.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x1b4
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.420820-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x1b4
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.160186-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4826
Message: Načetla se konfigurační data spouštění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Obecné nastavení:
Možnosti načtení: -
Upřesňující možnosti: Ne
Zásady přístupu ke konfiguraci: Výchozí
Protokolování systémových událostí: Ne
Ladění jádra: Ne
Typ spuštění VSM: Vypnuto
Nastavení podpisu:
Testovací podepsání: Ne
Podepsání za běhu: Ne
Zakázat kontroly integrity: Ne
Nastavení HyperVisoru:
Možnosti načtení HyperVisoru: -
Typ spuštění HyperVisoru: Vypnuto
Ladění HyperVisoru: Ne
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157515-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4696
Message: Primární token byl přiřazen k procesu.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Informace o procesu:
ID procesu: 0x4
Název procesu:
Cílový proces:
ID cílového procesu: 0x7c
Název cílového procesu: Registry
Informace o novému tokenu:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157512-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-90BQ4M3842Q
Event Code: 4688
Message: Byl vytvořen nový proces.
Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7
Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0
Informace o procesu:
ID nového procesu: 0x7c
Název nového procesu: Registry
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:
Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.
Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.
Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.
Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20211206013958.157503-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"DriverData"=C:\Windows\System32\Drivers\DriverData
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"PSModulePath"=%ProgramFiles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"NUMBER_OF_PROCESSORS"=8
"PROCESSOR_LEVEL"=23
"PROCESSOR_IDENTIFIER"=AMD64 Family 23 Model 104 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=6801
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
Omlouvám se, dal jsem vám chybný odkaz. Lonk ne FRST+Addition najdete zde: https://forum.viry.cz/viewtopic.php?f=13&t=154679 . Poprosím o nový sken a ještě jednou se omlouvám.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Hrozby v notebooku
Zdravím, vkládám logy z FRST. Díky za kontrolu...
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-01-2022
Ran by Uživatel (administrator) on VEV (LENOVO 82KD) (28-01-2022 22:17:35)
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Platform: Microsoft Windows 10 Home Version 21H2 19044.1469 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atieclxx.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe <2>
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe <4>
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe <4>
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\FnHotkeyUtility.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe <2>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [1183968 2020-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35320448 2022-01-25] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-25] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {0AA4AC9E-99B2-498C-AB13-460E98436552} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [201584 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
Task: {0DAB77C4-E13B-44C3-867A-B311F70B7613} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {1D68138B-4E01-4E56-9527-AFB48A8C5F75} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {1E18EDC9-1FBD-4032-9F0E-A1952C88F0EC} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a98fcc66-ed44-45bd-9219-f7e12ab8cdc5 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {252EA0E8-2514-41DB-8249-67A1E185BBBC} - System32\Tasks\CCleanerSkipUAC - Uživatel => C:\Program Files\CCleaner\CCleaner.exe [29453952 2022-01-25] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3A5C7255-2A53-4838-B450-959B37AEE8B9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64248 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {3DA5B848-14FC-4CD9-80D3-CA31D4E6C57F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\06fc3c63-835d-4d71-a20d-b769c3bbda70 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {57CC6F56-C512-4E43-BD99-6E75EC31993C} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [443248 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
Task: {654263C5-3E72-4408-A377-09D612B7C9AC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {6D0F23CF-81F2-415F-ADCC-3DBBD3A7630E} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\574fad2b-0b0b-4ae4-afb2-5cace8920260 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {7A60E2B2-3047-424C-AEA8-9FE382A92C99} - \Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance -> No File <==== ATTENTION
Task: {944B60B5-35F3-4D4D-8584-AA80E9348616} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {A0FE0BC9-3809-4441-BB6A-F05B98F9A476} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\653ae2f7-5365-4b1c-a375-d4032e2ea9cd => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {A4EA29B3-3C61-43BB-9E6B-229F18D18D3C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A9871E77-6095-4DD0-9B90-7F37B26C70F0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {B65443A6-41F2-4E5A-BEFC-3E476A5C84EC} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {C3DAD5D2-E7F7-4024-8CEA-FF372788DE06} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-01-25] (Piriform Software Ltd -> Piriform)
Task: {C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F} - \OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500 -> No File <==== ATTENTION
Task: {CD5FA559-040D-416F-AC68-61489BBDE192} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [145480 2021-09-09] (Lenovo -> Lenovo Group Ltd.)
Task: {DE66F7B0-C59E-41D0-AC33-53373A1D698D} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {DE6A98E4-AED4-43D0-A630-FA3709D8FCA4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E5C6E488-17DC-4BFA-8D3E-6CB5AB43FBD4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\2f6f9f41-6722-499b-a9fb-08c3b508630d => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{629a3f1e-ed44-44f3-abad-11f770678120}: [DhcpNameServer] 150.209.1.2
Tcpip\..\Interfaces\{7ded90ca-d510-4ddb-ac0c-00741b03bb2a}: [DhcpNameServer] 62.129.50.20 85.135.32.100
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Uživatel\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-12]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-18] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2022-01-28]
CHR DownloadDir: C:\Users\Uživatel\Desktop
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-12-05]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-12-05]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-12-05]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-12-05]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-12-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-05]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-12-05]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2173912 2020-10-15] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [164568 2020-11-30] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe [201472 2021-11-21] (Lenovo -> Lenovo(beijing) Limited)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [31016 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1820080 2021-02-06] (Lenovo -> Lenovo(beijing) Limited)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [116592 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [80471928 2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2022-01-15] (Malwarebytes Corporation -> Malwarebytes Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-29] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-29] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-28 22:17 - 2022-01-28 22:18 - 000017014 _____ C:\Users\Uživatel\Desktop\FRST.txt
2022-01-28 22:17 - 2022-01-28 22:17 - 000000000 ____D C:\FRST
2022-01-28 22:16 - 2022-01-28 22:16 - 002311680 _____ (Farbar) C:\Users\Uživatel\Desktop\FRST64.exe
2022-01-27 21:20 - 2022-01-27 21:19 - 000014654 _____ C:\Users\Uživatel\Desktop\info.txt
2022-01-27 21:18 - 2022-01-27 21:21 - 000000000 ____D C:\Program Files\trend micro
2022-01-27 21:18 - 2022-01-27 21:18 - 000000000 ____D C:\rsit
2022-01-27 21:17 - 2022-01-27 21:17 - 001222144 _____ C:\Users\Uživatel\Desktop\RSITx64.exe
2022-01-27 21:16 - 2022-01-28 22:14 - 000037694 _____ C:\Users\Uživatel\Desktop\FRST návod.odt
2022-01-23 18:49 - 2022-01-23 18:49 - 000011905 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-01-23 18:45 - 2022-01-23 18:45 - 000000000 ___HD C:\$WinREAgent
2022-01-15 16:47 - 2022-01-15 16:47 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Jpeg Resampler
2022-01-15 15:36 - 2022-01-15 15:36 - 000001097 _____ C:\Users\Uživatel\Desktop\Jpeg Resampler 2010.lnk
2022-01-15 15:36 - 2022-01-15 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jpeg Resampler 2010
2022-01-15 15:36 - 2022-01-15 15:36 - 000000000 ____D C:\Program Files (x86)\JpegResampler2010
2022-01-15 15:26 - 2022-01-15 15:39 - 000129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2022-01-15 15:26 - 2022-01-15 15:26 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-01-15 15:12 - 2022-01-15 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2022-01-15 15:12 - 2022-01-15 15:12 - 000001394 _____ C:\Users\Public\Desktop\Skype.lnk
2022-01-15 15:12 - 2022-01-15 15:12 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Skype
2022-01-15 15:01 - 2022-01-28 22:00 - 000000000 ____D C:\Program Files\CCleaner
2022-01-15 15:01 - 2022-01-27 21:21 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-01-15 15:01 - 2022-01-15 15:01 - 000002892 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Uživatel
2022-01-15 15:01 - 2022-01-15 15:01 - 000000874 _____ C:\Users\Public\Desktop\CCleaner.lnk
2022-01-15 15:01 - 2022-01-15 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-01-15 14:59 - 2022-01-15 16:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2022-01-15 14:59 - 2022-01-15 14:59 - 000001274 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2022-01-15 14:58 - 2022-01-15 14:58 - 000000000 ____D C:\Program Files (x86)\DsNET Corp
2022-01-12 22:23 - 2022-01-12 22:23 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 22:23 - 2022-01-12 22:23 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-12 22:18 - 2022-01-12 22:18 - 000000000 ____D C:\Users\Uživatel\AppData\LocalLow\Adobe
2022-01-12 22:11 - 2022-01-12 22:11 - 000002213 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2022-01-09 21:37 - 2022-01-09 21:37 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2022-01-09 21:33 - 2022-01-12 22:18 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Adobe
2022-01-05 20:59 - 2022-01-27 21:12 - 000000000 ____D C:\Users\Uživatel\Desktop\Ulož exterňák
2022-01-02 17:22 - 2022-01-02 17:39 - 000000000 ____D C:\MOJE
2021-12-29 19:34 - 2021-12-29 19:34 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-29 19:29 - 2021-12-29 19:29 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-29 19:29 - 2021-12-29 19:29 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-29 18:29 - 2021-12-29 18:29 - 000000436 _____ C:\Users\Uživatel\Desktop\Tento počítač.lnk
2021-12-29 17:57 - 2022-01-23 17:23 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4032367770-2957954575-1367609206-1001
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-28 22:10 - 2021-12-06 02:40 - 000000000 ____D C:\ProgramData\Lenovo
2022-01-28 22:01 - 2021-12-05 21:30 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-28 22:00 - 2021-12-06 02:32 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-27 21:44 - 2021-12-06 02:56 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-27 21:44 - 2021-12-06 02:34 - 000717850 _____ C:\WINDOWS\system32\perfh005.dat
2022-01-27 21:44 - 2021-12-06 02:34 - 000144992 _____ C:\WINDOWS\system32\perfc005.dat
2022-01-27 21:44 - 2021-12-06 02:31 - 000000000 ____D C:\WINDOWS\INF
2022-01-27 21:40 - 2021-12-06 02:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-27 21:40 - 2021-12-06 02:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-27 21:40 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ServiceState
2022-01-27 21:39 - 2021-12-06 02:29 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-01-27 21:30 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-27 21:09 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-27 21:07 - 2021-12-06 02:40 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-27 21:07 - 2021-12-06 02:40 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-25 21:17 - 2021-12-05 21:31 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-25 21:17 - 2021-12-05 21:31 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-01-23 19:24 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-23 19:23 - 2021-12-06 02:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-23 17:40 - 2021-12-06 02:53 - 000000000 ____D C:\Users\Uživatel\AppData\Local\PlaceholderTileLogoFolder
2022-01-23 17:29 - 2021-12-06 02:40 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-23 17:29 - 2021-12-06 02:32 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-23 17:29 - 2021-12-05 21:30 - 000003474 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-23 17:29 - 2021-12-05 21:30 - 000003350 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-23 17:23 - 2021-12-06 02:52 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-01-23 17:23 - 2021-12-06 02:49 - 000002401 _____ C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-01-16 21:49 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Local\D3DSCache
2022-01-16 21:48 - 2021-12-05 21:46 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2022-01-15 14:35 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Packages
2022-01-13 01:07 - 2021-08-12 10:55 - 000064248 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-13 01:06 - 2021-08-12 10:55 - 000431016 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-13 01:06 - 2021-08-12 10:55 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-13 01:06 - 2021-05-26 20:54 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-12 22:34 - 2021-12-06 02:39 - 000634256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\setup
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-12 22:19 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Adobe
2022-01-12 22:15 - 2021-12-06 03:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-12 22:14 - 2021-12-06 03:05 - 145765912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-01-12 22:12 - 2021-12-06 02:53 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Lenovo
2022-01-12 22:12 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2022-01-09 21:33 - 2021-12-05 21:46 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-01-02 15:54 - 2021-12-06 03:06 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-12-29 20:05 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\servicing
2021-12-29 18:06 - 2021-12-05 21:45 - 000000000 ____D C:\ProgramData\Adobe
2021-12-29 18:02 - 2020-11-19 08:33 - 000000000 ____D C:\ProgramData\Packages
2021-12-29 17:59 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Díky za kontrolu...Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-01-2022
Ran by Uživatel (administrator) on VEV (LENOVO 82KD) (28-01-2022 22:17:35)
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Platform: Microsoft Windows 10 Home Version 21H2 19044.1469 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atieclxx.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe <2>
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe <4>
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe <4>
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\FnHotkeyUtility.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe <2>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_85a48ee0cac1d3dd\RtkAudUService64.exe [1183968 2020-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35320448 2022-01-25] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-25] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {0AA4AC9E-99B2-498C-AB13-460E98436552} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [201584 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
Task: {0DAB77C4-E13B-44C3-867A-B311F70B7613} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {1D68138B-4E01-4E56-9527-AFB48A8C5F75} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {1E18EDC9-1FBD-4032-9F0E-A1952C88F0EC} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a98fcc66-ed44-45bd-9219-f7e12ab8cdc5 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {252EA0E8-2514-41DB-8249-67A1E185BBBC} - System32\Tasks\CCleanerSkipUAC - Uživatel => C:\Program Files\CCleaner\CCleaner.exe [29453952 2022-01-25] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3A5C7255-2A53-4838-B450-959B37AEE8B9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64248 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {3DA5B848-14FC-4CD9-80D3-CA31D4E6C57F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\06fc3c63-835d-4d71-a20d-b769c3bbda70 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {57CC6F56-C512-4E43-BD99-6E75EC31993C} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [443248 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
Task: {654263C5-3E72-4408-A377-09D612B7C9AC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {6D0F23CF-81F2-415F-ADCC-3DBBD3A7630E} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\574fad2b-0b0b-4ae4-afb2-5cace8920260 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {7A60E2B2-3047-424C-AEA8-9FE382A92C99} - \Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance -> No File <==== ATTENTION
Task: {944B60B5-35F3-4D4D-8584-AA80E9348616} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {A0FE0BC9-3809-4441-BB6A-F05B98F9A476} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\653ae2f7-5365-4b1c-a375-d4032e2ea9cd => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
Task: {A4EA29B3-3C61-43BB-9E6B-229F18D18D3C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A9871E77-6095-4DD0-9B90-7F37B26C70F0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {B65443A6-41F2-4E5A-BEFC-3E476A5C84EC} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {C3DAD5D2-E7F7-4024-8CEA-FF372788DE06} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-01-25] (Piriform Software Ltd -> Piriform)
Task: {C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F} - \OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500 -> No File <==== ATTENTION
Task: {CD5FA559-040D-416F-AC68-61489BBDE192} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [145480 2021-09-09] (Lenovo -> Lenovo Group Ltd.)
Task: {DE66F7B0-C59E-41D0-AC33-53373A1D698D} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {DE6A98E4-AED4-43D0-A630-FA3709D8FCA4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E5C6E488-17DC-4BFA-8D3E-6CB5AB43FBD4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\2f6f9f41-6722-499b-a9fb-08c3b508630d => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{629a3f1e-ed44-44f3-abad-11f770678120}: [DhcpNameServer] 150.209.1.2
Tcpip\..\Interfaces\{7ded90ca-d510-4ddb-ac0c-00741b03bb2a}: [DhcpNameServer] 62.129.50.20 85.135.32.100
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Uživatel\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-12]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-18] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2022-01-28]
CHR DownloadDir: C:\Users\Uživatel\Desktop
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-12-05]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-12-05]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-12-05]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-12-05]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-12-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-05]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-12-05]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2173912 2020-10-15] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [164568 2020-11-30] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84264 2022-01-13] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2f1b6109fa237c16\LenovoUtilityService.exe [201472 2021-11-21] (Lenovo -> Lenovo(beijing) Limited)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [31016 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1820080 2021-02-06] (Lenovo -> Lenovo(beijing) Limited)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [116592 2021-07-21] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-29] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [80471928 2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2022-01-15] (Malwarebytes Corporation -> Malwarebytes Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-29] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-29] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-28 22:17 - 2022-01-28 22:18 - 000017014 _____ C:\Users\Uživatel\Desktop\FRST.txt
2022-01-28 22:17 - 2022-01-28 22:17 - 000000000 ____D C:\FRST
2022-01-28 22:16 - 2022-01-28 22:16 - 002311680 _____ (Farbar) C:\Users\Uživatel\Desktop\FRST64.exe
2022-01-27 21:20 - 2022-01-27 21:19 - 000014654 _____ C:\Users\Uživatel\Desktop\info.txt
2022-01-27 21:18 - 2022-01-27 21:21 - 000000000 ____D C:\Program Files\trend micro
2022-01-27 21:18 - 2022-01-27 21:18 - 000000000 ____D C:\rsit
2022-01-27 21:17 - 2022-01-27 21:17 - 001222144 _____ C:\Users\Uživatel\Desktop\RSITx64.exe
2022-01-27 21:16 - 2022-01-28 22:14 - 000037694 _____ C:\Users\Uživatel\Desktop\FRST návod.odt
2022-01-23 18:49 - 2022-01-23 18:49 - 000011905 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-01-23 18:45 - 2022-01-23 18:45 - 000000000 ___HD C:\$WinREAgent
2022-01-15 16:47 - 2022-01-15 16:47 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Jpeg Resampler
2022-01-15 15:36 - 2022-01-15 15:36 - 000001097 _____ C:\Users\Uživatel\Desktop\Jpeg Resampler 2010.lnk
2022-01-15 15:36 - 2022-01-15 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jpeg Resampler 2010
2022-01-15 15:36 - 2022-01-15 15:36 - 000000000 ____D C:\Program Files (x86)\JpegResampler2010
2022-01-15 15:26 - 2022-01-15 15:39 - 000129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2022-01-15 15:26 - 2022-01-15 15:26 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-01-15 15:12 - 2022-01-15 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2022-01-15 15:12 - 2022-01-15 15:12 - 000001394 _____ C:\Users\Public\Desktop\Skype.lnk
2022-01-15 15:12 - 2022-01-15 15:12 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Skype
2022-01-15 15:01 - 2022-01-28 22:00 - 000000000 ____D C:\Program Files\CCleaner
2022-01-15 15:01 - 2022-01-27 21:21 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-01-15 15:01 - 2022-01-15 15:01 - 000002892 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Uživatel
2022-01-15 15:01 - 2022-01-15 15:01 - 000000874 _____ C:\Users\Public\Desktop\CCleaner.lnk
2022-01-15 15:01 - 2022-01-15 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-01-15 14:59 - 2022-01-15 16:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2022-01-15 14:59 - 2022-01-15 14:59 - 000001274 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2022-01-15 14:58 - 2022-01-15 14:58 - 000000000 ____D C:\Program Files (x86)\DsNET Corp
2022-01-12 22:23 - 2022-01-12 22:23 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 22:23 - 2022-01-12 22:23 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-12 22:18 - 2022-01-12 22:18 - 000000000 ____D C:\Users\Uživatel\AppData\LocalLow\Adobe
2022-01-12 22:11 - 2022-01-12 22:11 - 000002213 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2022-01-09 21:37 - 2022-01-09 21:37 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2022-01-09 21:33 - 2022-01-12 22:18 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Adobe
2022-01-05 20:59 - 2022-01-27 21:12 - 000000000 ____D C:\Users\Uživatel\Desktop\Ulož exterňák
2022-01-02 17:22 - 2022-01-02 17:39 - 000000000 ____D C:\MOJE
2021-12-29 19:34 - 2021-12-29 19:34 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-29 19:29 - 2021-12-29 19:29 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-29 19:29 - 2021-12-29 19:29 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-29 18:29 - 2021-12-29 18:29 - 000000436 _____ C:\Users\Uživatel\Desktop\Tento počítač.lnk
2021-12-29 17:57 - 2022-01-23 17:23 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4032367770-2957954575-1367609206-1001
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-28 22:10 - 2021-12-06 02:40 - 000000000 ____D C:\ProgramData\Lenovo
2022-01-28 22:01 - 2021-12-05 21:30 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-28 22:00 - 2021-12-06 02:32 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-27 21:44 - 2021-12-06 02:56 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-27 21:44 - 2021-12-06 02:34 - 000717850 _____ C:\WINDOWS\system32\perfh005.dat
2022-01-27 21:44 - 2021-12-06 02:34 - 000144992 _____ C:\WINDOWS\system32\perfc005.dat
2022-01-27 21:44 - 2021-12-06 02:31 - 000000000 ____D C:\WINDOWS\INF
2022-01-27 21:40 - 2021-12-06 02:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-27 21:40 - 2021-12-06 02:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-27 21:40 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ServiceState
2022-01-27 21:39 - 2021-12-06 02:29 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-01-27 21:30 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-27 21:09 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-27 21:07 - 2021-12-06 02:40 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-27 21:07 - 2021-12-06 02:40 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-25 21:17 - 2021-12-05 21:31 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-25 21:17 - 2021-12-05 21:31 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-01-23 19:24 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-23 19:23 - 2021-12-06 02:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-23 17:40 - 2021-12-06 02:53 - 000000000 ____D C:\Users\Uživatel\AppData\Local\PlaceholderTileLogoFolder
2022-01-23 17:29 - 2021-12-06 02:40 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-23 17:29 - 2021-12-06 02:32 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-23 17:29 - 2021-12-05 21:30 - 000003474 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-23 17:29 - 2021-12-05 21:30 - 000003350 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-23 17:23 - 2021-12-06 02:52 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-01-23 17:23 - 2021-12-06 02:49 - 000002401 _____ C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-01-16 21:49 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Local\D3DSCache
2022-01-16 21:48 - 2021-12-05 21:46 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2022-01-15 14:35 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Packages
2022-01-13 01:07 - 2021-08-12 10:55 - 000064248 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-13 01:06 - 2021-08-12 10:55 - 000431016 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-13 01:06 - 2021-08-12 10:55 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-13 01:06 - 2021-05-26 20:54 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-12 22:34 - 2021-12-06 02:39 - 000634256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\setup
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-12 22:34 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-12 22:19 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Adobe
2022-01-12 22:15 - 2021-12-06 03:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-12 22:14 - 2021-12-06 03:05 - 145765912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-01-12 22:12 - 2021-12-06 02:53 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Lenovo
2022-01-12 22:12 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2022-01-09 21:33 - 2021-12-05 21:46 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-01-02 15:54 - 2021-12-06 03:06 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-12-29 20:05 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\servicing
2021-12-29 18:06 - 2021-12-05 21:45 - 000000000 ____D C:\ProgramData\Adobe
2021-12-29 18:02 - 2020-11-19 08:33 - 000000000 ____D C:\ProgramData\Packages
2021-12-29 17:59 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Re: Hrozby v notebooku
A ještě log "Addition"
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-01-2022
Ran by Uživatel (28-01-2022 22:20:00)
Running from C:\Users\Uživatel\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1469 (X64) (2021-12-06 01:47:32)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4032367770-2957954575-1367609206-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4032367770-2957954575-1367609206-503 - Limited - Disabled)
Guest (S-1-5-21-4032367770-2957954575-1367609206-501 - Limited - Disabled)
Uživatel (S-1-5-21-4032367770-2957954575-1367609206-1001 - Administrator - Enabled) => C:\Users\Uživatel
WDAGUtilityAccount (S-1-5-21-4032367770-2957954575-1367609206-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
CCleaner (HKLM\...\CCleaner) (Version: 5.89 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.99 - Google LLC)
IrfanView 4.59 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.59 - Irfan Skiljan)
Jpeg Resampler Vs 6+ (HKLM-x32\...\JpegResampler2010_is1) (Version: - Jpeg Resampler)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0131 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.10.26.0 - Lenovo Group Ltd.)
LibreOffice 7.2.3.2 (HKLM\...\{81490660-3C36-47B4-AE9F-73B6C5BD4F98}) (Version: 7.2.3.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\OneDriveSetup.exe) (Version: 22.002.0103.0004 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E876418F-BE59-4D8C-B9A5-74B056B676FA}) (Version: 2.93.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\...\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 94.0.2 (x64 cs)) (Version: 94.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 94.0.2 - Mozilla)
Skype verze 8.79 (HKLM-x32\...\Skype_is1) (Version: 8.79 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\advancedmicrodevicesinc-2.amdradeonsoftware_10.20.40028.0_x64__0a9344xs7nr4m [2021-12-06] (Advanced Micro Devices Inc.) [Startup Task]
AV1 Video Extension -> C:\Program Files\WindowsApps\microsoft.av1videoextension_1.1.41601.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_3.20800.804.0_x64__rz1tebttyb220 [2021-12-06] (Dolby Laboratories)
Elevoc Vocplus System -> C:\Program Files\WindowsApps\elevoctechnologyco.ltd.elevocvocplussystem_1.0.29.0_x64__ttaqwwhyt5s6t [2021-12-06] (Elevoc Technology Co., Ltd.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.15.0_x64__5grkq8ppsgwt4 [2021-12-29] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2112.10.0_x64__k1h2ywk1493x8 [2021-12-29] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-12] (Microsoft Studios) [MS Ad]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.19.234.0_x64__dt26b99r8h8gj [2021-12-06] (Realtek Semiconductor Corp)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-12] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-19] (Fox Magic Software) [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 62.129.50.20 - 85.135.32.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{5BCF31A0-C0CC-4860-A54E-B8AC1C1E85C8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CC30323A-543E-4971-8B5E-37EA1FAB18C3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{782D0C7B-2DB3-4372-9B71-1567D7A47E98}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8CB73C96-7DCE-424F-95A0-14E68643618E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3BD015AA-E63D-4249-BE0F-2012F371F954}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3382B04F-613A-45B6-BE67-808726CFD5B5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B0B85DF5-4467-4A4C-9DF8-379AEDDBF14F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{19C8165F-5323-4516-822C-59D8AB0EC1FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8D5B2351-0103-45FE-89FB-B89BCA5AB437}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F1668145-9354-4D69-A2DD-AC124845E6E4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4E1EED3A-1EE2-4680-94BA-899670BFD5BA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EB65DA3F-F0D9-43B6-B7A8-E039D6D34289}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D69682FD-3198-441F-A0F5-0052F900770E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C86B7A28-D374-485A-8690-54780072EA42}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BAF93F76-171B-45E0-944B-8188218D9E42}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1641552C-D1E0-488B-A1AB-8D995B92C46C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B81B9665-F785-402C-82B8-896EB434257C}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
12-01-2022 22:15:11 Instalační služba modulů systému Windows
23-01-2022 18:45:00 Instalační služba modulů systému Windows
27-01-2022 21:30:05 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (01/27/2022 09:39:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/27/2022 09:39:49 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/15/2022 04:49:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/15/2022 04:49:18 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
System errors:
=============
Error: (01/27/2022 09:11:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/27/2022 09:06:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba System Interface Foundation Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/23/2022 05:26:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/15/2022 01:21:05 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: VEV)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (01/15/2022 01:20:41 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: NT AUTHORITY)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (01/15/2022 01:20:41 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: Při vytváření přihlašovacích údajů TLS Klient se stala závažná chyba. Stav interní chyby je 10013.
Error: (01/15/2022 12:35:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/12/2022 10:11:56 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba LenovoVantageService je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Windows Defender:
================
Date: 2022-01-23 17:27:03
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2390.0, AS: 1.355.2390.0, NIS: 1.355.2390.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:52
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/Toptools
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:49
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/PiriformBundler
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\ccsetup321.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:49
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:46
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/Vigua.A
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\ashampoo_burning_studio_6_free_6.80_4312.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
CodeIntegrity:
===============
Date: 2021-12-06 02:49:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\McAfee\Platform\Core\vtploader.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO GLCN40WW 07/23/2021
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 3 5300U with Radeon Graphics
Percentage of memory in use: 54%
Total physical RAM: 6005.99 MB
Available physical RAM: 2728.49 MB
Total Virtual: 6965.99 MB
Available Virtual: 2854.94 MB
==================== Drives ================================
Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:167.98 GB) NTFS
\\?\Volume{c7a9fb56-068b-4170-8dea-d818eca51e93}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{f097b473-34ff-4680-a182-4ff678b8b272}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 4263E35A)
Partition: GPT.
==================== End of Addition.txt =======================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-01-2022
Ran by Uživatel (28-01-2022 22:20:00)
Running from C:\Users\Uživatel\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1469 (X64) (2021-12-06 01:47:32)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4032367770-2957954575-1367609206-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4032367770-2957954575-1367609206-503 - Limited - Disabled)
Guest (S-1-5-21-4032367770-2957954575-1367609206-501 - Limited - Disabled)
Uživatel (S-1-5-21-4032367770-2957954575-1367609206-1001 - Administrator - Enabled) => C:\Users\Uživatel
WDAGUtilityAccount (S-1-5-21-4032367770-2957954575-1367609206-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
CCleaner (HKLM\...\CCleaner) (Version: 5.89 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.99 - Google LLC)
IrfanView 4.59 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.59 - Irfan Skiljan)
Jpeg Resampler Vs 6+ (HKLM-x32\...\JpegResampler2010_is1) (Version: - Jpeg Resampler)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0131 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.10.26.0 - Lenovo Group Ltd.)
LibreOffice 7.2.3.2 (HKLM\...\{81490660-3C36-47B4-AE9F-73B6C5BD4F98}) (Version: 7.2.3.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\OneDriveSetup.exe) (Version: 22.002.0103.0004 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E876418F-BE59-4D8C-B9A5-74B056B676FA}) (Version: 2.93.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\...\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 94.0.2 (x64 cs)) (Version: 94.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 94.0.2 - Mozilla)
Skype verze 8.79 (HKLM-x32\...\Skype_is1) (Version: 8.79 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\advancedmicrodevicesinc-2.amdradeonsoftware_10.20.40028.0_x64__0a9344xs7nr4m [2021-12-06] (Advanced Micro Devices Inc.) [Startup Task]
AV1 Video Extension -> C:\Program Files\WindowsApps\microsoft.av1videoextension_1.1.41601.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_3.20800.804.0_x64__rz1tebttyb220 [2021-12-06] (Dolby Laboratories)
Elevoc Vocplus System -> C:\Program Files\WindowsApps\elevoctechnologyco.ltd.elevocvocplussystem_1.0.29.0_x64__ttaqwwhyt5s6t [2021-12-06] (Elevoc Technology Co., Ltd.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.15.0_x64__5grkq8ppsgwt4 [2021-12-29] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2112.10.0_x64__k1h2ywk1493x8 [2021-12-29] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-12] (Microsoft Studios) [MS Ad]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.19.234.0_x64__dt26b99r8h8gj [2021-12-06] (Realtek Semiconductor Corp)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-12] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-19] (Fox Magic Software) [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 62.129.50.20 - 85.135.32.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{5BCF31A0-C0CC-4860-A54E-B8AC1C1E85C8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CC30323A-543E-4971-8B5E-37EA1FAB18C3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{782D0C7B-2DB3-4372-9B71-1567D7A47E98}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8CB73C96-7DCE-424F-95A0-14E68643618E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3BD015AA-E63D-4249-BE0F-2012F371F954}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3382B04F-613A-45B6-BE67-808726CFD5B5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B0B85DF5-4467-4A4C-9DF8-379AEDDBF14F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{19C8165F-5323-4516-822C-59D8AB0EC1FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8D5B2351-0103-45FE-89FB-B89BCA5AB437}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F1668145-9354-4D69-A2DD-AC124845E6E4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4E1EED3A-1EE2-4680-94BA-899670BFD5BA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EB65DA3F-F0D9-43B6-B7A8-E039D6D34289}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D69682FD-3198-441F-A0F5-0052F900770E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C86B7A28-D374-485A-8690-54780072EA42}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BAF93F76-171B-45E0-944B-8188218D9E42}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1641552C-D1E0-488B-A1AB-8D995B92C46C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B81B9665-F785-402C-82B8-896EB434257C}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
12-01-2022 22:15:11 Instalační služba modulů systému Windows
23-01-2022 18:45:00 Instalační služba modulů systému Windows
27-01-2022 21:30:05 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (01/27/2022 09:39:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/27/2022 09:39:49 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/23/2022 07:24:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/15/2022 04:49:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (01/15/2022 04:49:18 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
System errors:
=============
Error: (01/27/2022 09:11:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/27/2022 09:06:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba System Interface Foundation Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/23/2022 05:26:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/15/2022 01:21:05 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: VEV)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (01/15/2022 01:20:41 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: NT AUTHORITY)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (01/15/2022 01:20:41 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: Při vytváření přihlašovacích údajů TLS Klient se stala závažná chyba. Stav interní chyby je 10013.
Error: (01/15/2022 12:35:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (01/12/2022 10:11:56 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba LenovoVantageService je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Windows Defender:
================
Date: 2022-01-23 17:27:03
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2390.0, AS: 1.355.2390.0, NIS: 1.355.2390.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:52
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/Toptools
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:49
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/PiriformBundler
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\ccsetup321.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:49
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-23 17:26:46
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/Vigua.A
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_D:\MOJE\Uložené i v NTB\Setup - instalačky\ashampoo_burning_studio_6_free_6.80_4312.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.355.2132.0, AS: 1.355.2132.0, NIS: 1.355.2132.0
Verze modulu: AM: 1.1.18800.4, NIS: 1.1.18800.4
CodeIntegrity:
===============
Date: 2021-12-06 02:49:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\McAfee\Platform\Core\vtploader.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO GLCN40WW 07/23/2021
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 3 5300U with Radeon Graphics
Percentage of memory in use: 54%
Total physical RAM: 6005.99 MB
Available physical RAM: 2728.49 MB
Total Virtual: 6965.99 MB
Available Virtual: 2854.94 MB
==================== Drives ================================
Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:167.98 GB) NTFS
\\?\Volume{c7a9fb56-068b-4170-8dea-d818eca51e93}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{f097b473-34ff-4680-a182-4ff678b8b272}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 4263E35A)
Partition: GPT.
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
OK. Teď spusťte tuto utililitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Hrozby v notebooku
Zdravím,
program jsem stáhla a spustila skenování, ale píše mi to toto - vizte níže v příloze (předinstalovaný software, co s tím?)... tak jsem raději skončila a čekám
Moc dííííky!
program jsem stáhla a spustila skenování, ale píše mi to toto - vizte níže v příloze (předinstalovaný software, co s tím?)... tak jsem raději skončila a čekám
Moc dííííky!
- Přílohy
-
- Clipboard01.jpg (37.58 KiB) Zobrazeno 1121 x
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
To je OK, preinstalled jsou nějaké utility od výrobce NB, které v běžném systému nejsou a ADW je vyhodnotí, jako nestandardní součást. Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe
Task: {1D68138B-4E01-4E56-9527-AFB48A8C5F75} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
ask: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {7A60E2B2-3047-424C-AEA8-9FE382A92C99} - \Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance -> No File <==== ATTENTION
ask: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F} - \OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500 -> No File <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Hrozby v notebooku
Pěkný večer, posílám log z frst.
Děkuji...
Fix result of Farbar Recovery Scan Tool (x64) Version: 26-01-2022
Ran by Uživatel (29-01-2022 18:38:58) Run:1
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe
Task: {1D68138B-4E01-4E56-9527-AFB48A8C5F75} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
ask: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {7A60E2B2-3047-424C-AEA8-9FE382A92C99} - \Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance -> No File <==== ATTENTION
ask: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F} - \OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500 -> No File <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
EmptyTemp:
End
*****************
Processes closed successfully.
"D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe" => not found
"D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe" => not found
"D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D68138B-4E01-4E56-9527-AFB48A8C5F75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D68138B-4E01-4E56-9527-AFB48A8C5F75}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
ask: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7A60E2B2-3047-424C-AEA8-9FE382A92C99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A60E2B2-3047-424C-AEA8-9FE382A92C99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance" => removed successfully
ask: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500" => removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 66759090 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 4233966 B
Edge => 0 B
Chrome => 458408408 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 8696 B
NetworkService => 43910 B
Uživatel => 232206036 B
RecycleBin => 0 B
EmptyTemp: => 726.4 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 29-01-2022 18:39:41)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 18:39:41 ====
Děkuji...
Fix result of Farbar Recovery Scan Tool (x64) Version: 26-01-2022
Ran by Uživatel (29-01-2022 18:38:58) Run:1
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe
D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe
Task: {1D68138B-4E01-4E56-9527-AFB48A8C5F75} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
ask: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {7A60E2B2-3047-424C-AEA8-9FE382A92C99} - \Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance -> No File <==== ATTENTION
ask: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC)
Task: {C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F} - \OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500 -> No File <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
EmptyTemp:
End
*****************
Processes closed successfully.
"D:\MOJE\Uložené i v NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe" => not found
"D:\MOJE\Uložené i v NTB\Setup - instalačky\FFInstOnline.exe" => not found
"D:\MOJE\Uložené i v NTB\Setup - instalačky\atubecatcher-setup.exe" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D68138B-4E01-4E56-9527-AFB48A8C5F75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D68138B-4E01-4E56-9527-AFB48A8C5F75}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
ask: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7A60E2B2-3047-424C-AEA8-9FE382A92C99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A60E2B2-3047-424C-AEA8-9FE382A92C99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance" => removed successfully
ask: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-12-05] (Google LLC -> Google LLC) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6AB035E-FDD3-420D-BD5A-29AAB13F9B6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-2609494327-1214802505-4041507000-500" => removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 66759090 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 4233966 B
Edge => 0 B
Chrome => 458408408 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 8696 B
NetworkService => 43910 B
Uživatel => 232206036 B
RecycleBin => 0 B
EmptyTemp: => 726.4 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 29-01-2022 18:39:41)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 18:39:41 ====
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
Smazáno, log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Hrozby v notebooku
Takže hotovo? Děkuji moc za skvělou spolupráci! ☺
-
Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Hrozby v notebooku
Ano, hotovo. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?